I captured a JFIF image packet of 2817 Bytes. Out of which image was of 2497 Bytes. By using option "export selected packet bytes" in wireshark, i extracted the file to my disk. The disk size is also 2497 bytes. Should not it expand as in network transmission it was compressed by GZIP. How the size is still the same after decompressing it. Or if it is not decompressed at all? following is the request responce block ...
======================================== asked 28 Jul ‘11, 07:08 Arjun edited 28 Jul ‘11, 11:08 SYN-bit ♦♦ |
One Answer:
No, the file size should be the same. As in this case, you talk about gzip, but the object is JPEG compressed (image) data. What you're seeing is the indication of the capability of the client to accept gzip encoded (compressed) data. It's then up to the server to decide to take the client up on its offer, or not. In this case it makes little sense, so the server chooses not to gzip the JPEG compressed data. answered 28 Jul '11, 07:55 Jaap ♦ |
Thanks Jaap..
If I take raw bits and save it with extension JPEG will it make an image? This can be done by writting binary data thru C program ...what u suggest?
Thanks, Arjun
(I converted your "answer" to a "comment", see the FAQ for details on how to use this site best)
Yes, you can do that through a program after saving "selected packet bytes", however, you can also use "File -> Export -> Objects -> HTTP" :-)