Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

can't translate "chunked" data

Status
Not open for further replies.

stevenriz

IS-IT--Management
May 21, 2001
1,069
Hello, I am using a few different free trial sniffers to attempt to view certain things on the network, web browsing etc... Most of which I cannot see due to the fact that the data is "chunked" data. Is there any easy way to view this? Here is an example of what the data looks like from within EffeTech HTTP Sniffer.
This is only a portion of the data....


HTTP/1.1 200 OK Date: Thu, 16 Sep 2004 16:55:56 GMT P3P: policyref=" CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE GOV" Cache-Control: private Connection: close Transfer-Encoding: chunked Content-Type: text/html Content-Encoding: gzip Set-Cookie: YM.Gen=i=vaJ46Ur8iCyUC6SohqziJVP0lrSkYKjdTidT3lQJrzneEKKH5YDk7bK1g6hjhyuA2EM_XcHpKvlGsVoT4iTI7Y89DOPOKJNxOvvj2Fs7EJsXdei8j1f6pafgLwCoDRamhJWk0UFXnfTqngoVZEqAfN3cjn7Hg.iGI0VRFrGyH0mNxUBP6waDfQdmYNaqfqk7ehLjn_KtYi.Apu3bXu2gUSW32eit27dQLksHNsTzachgRlrblwB1ZnigERTreMV9Zl3PER1xrf4JdP1m48YlNoq59mU8n5craVtItOcSIABXqrHkrj1BOyolHryWdKoWK2TOzLUHU4WXqzt4cD6RdUSZMRH4qIBL2DOOdhC4WrjYmV1zzw32wXM_axj6a8a33wae_7cAw1AACKiHrJEzcTMXSGn9OoFy7FH9J452kLBd6dUAzuNgnS6WCx.Xfn.hNn21aAGFWF94xvniuNzIHpfi8Rxje_V1BPXaQmtPlJzinMhtRoRPhac_vV6gNrWQahBcUR.vzmfCNKq.GeuSV.DBVHJJlH7yG475M5jYEmoeN4Xl.fUgG7MK67oqwdxTbyMxpLWmDMbbfMlSXZdy2mQsBnaVVKUjDJf0oK.JkwwJIxymK4W4dEijcv9K4bCbKHYMqlspcB5yq22qVSK.OuOzSyujymRRwHgPEOZkSXTlLbHevLfdbXwRe8QZzMr9LZmIHfFirkquILMWKRRhUmoP3D6i8fN50ZPcSr8Sp3u2PQ8eqZ6C5NWMyDeddNKO.Z1cwS0.cpNz7Qiuk8Wq7udnBwGgcEiIAXI2syA35zTb2sv.jbInCwrgYof8ZBxNZANGvpxnzHBe.JMWGFRu63i1JwFad2c1dPC0HXWr8Z25UWWtYwo6AgmRltiWE3MZ9tGLA5NSeeQv6hiXZHsZ3zraq3tPP4mSSGb6tJu65Dg8aCJZtn4dMBhWfMb.ct5C8jaSMvL5uohcY0amTGvabyCPjZ4oeZRnZRzH2pLKdz9HDbnVYWsUtiB3uIfsjiSVIpxHEghwIIybGHv01yvEsBqdFi_0eVmEt9TFTGdZLYzD3bjNQC2qbGmcRduJReR6nY9PEPK1Lkid3TYNao9QRYYQLV0qSrgHEEO_nf6_i.AtVPs43r5iOpvsaDKGh7haf9aU0SoI6sl5ezyWu9jYjTumi.hiYcV0KINkDd28vtleDXcqlEwGMLiR6n0uJkpSzmh3pytdUh8fQoJN1KajPDrnq3Mh9xCoQ8N.RL2t57_zb7qYKSy46CwxsA0w1ytgxqVQ_2Nn.00bLMOQsBINIoSmfs6YD7Nd2wrXdc77PtykED4alI51gcDKqV1vlNOqhbIpfeByWhFp3rTQvnEnrrhx9lWzY2VoOzW3geFQzOMH5.5Jl4RUfJRnJIRf68nvsDBnppf2Y9nkJHZqcA5C._vD&v=1; path=/; domain=mail.yahoo.com 225f ‹ì]érÛF¶þmUùÚHE–DZÜ$? µØÒÄZbÊq|§R,IX € dN&ï~¿ÓÝXH‘²$ljoÝQb’Øz9}ö¥±ûlkëÆí×ôšVÛÚj¯å»ãtâ·×vÇ®=ÀW꥾Û^û`?Ãð;µ=Ÿm±+oÒwcvmÇ?ÿ0£‹'œìªòöÝĉ½(eé,r-%u?¥êGûÚg4‹ÞÙÚo¸Aw„C–†QeÛ7ù—r3A/ø(¿²gS¦ÁÀz?;P^°/„7•0rƒ eœ¦Ñ¶ªÒí•| Ê&SzhNy±³¦ªŒæ¶«ŠŽ1ËÝ Ì~ïž]
 
Have you tried Ethereal? Ethereal will definitely let you see all the satandard protocols in three views, just as like the sniffing software that you pay for. It shows the summary view of all packets in the capture, the individual packete decode and also a screen with the actual hex representation of the data.

I'm not sure what you mean by "chunked". There may be certain applicatiosn that Ethereal and other free sniffers won't decode but you shoudl be able to see the basic stuff as long is it's not encrypted. If it is encrypted than you have other issues to resolve before capturing.

Owen O'Neill
Datacom Systems Inc.
Northeastern SE
 
Well it seems some sites transmit in Chunked data mode. So it is called like Transfer mode: Chunked. so the data I wish to view is encrypted. Mostly like while kids are looking at their yahoo mail etc. I will try that one you suggested and see what happens. Thanks!
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top