Examining / decoding HTTP multipart gzip content

[term srv]

Hi Eric,

Fiddler v2.3.2.1 beta, .NET 2.0.50727.4206, Vista Ultimate SP2 x86

Thank you for continuing to work on this great tool! I am wondering if there is a way for Fiddler to gunzip any multipart gzip content. I did some research but I cannot find an answer. I am seeing requests similar to this:


POST http://somehost/?somepost=somefile HTTP/1.1
Accept: text/*
Content-Type: multipart/form-data; boundary=--------------------someboundary
Host: somehost
Content-Length: 12345
Cache-Control: no-cache

----------------------someboundary
Content-Disposition: form-data; name="somefile"; filename="somefile.gz"
Content-Type: application/x-gzip
Content-Transfer-Encoding: gzip

((((((some gzip content))))))
----------------------someboundary--


I searched the list and found an example but it's not for multipart.

How to GZIP Decompress Http Requests?

Is it possible to decode HTTP multipart gzip encoding in Fiddler?

Also, a comment on the above example session. Even though there's some gzipped data being sent as some file.gz, the gzip streams I'm seeing do not contain gzip file headers (as it seems is typically the case with HTTP gzip streams). So I can't take that gzip data and put it in a file named file.gz and then use 'gzip -d file.gz' to decompress. Does anyone know of a tool that will convert a gzip HTTP stream to a gzip file based stream?


Thanks,

Jay

[EricLaw]

The short answer is that this isn't a common format, so you'll need to
write custom code to examine traffic of this nature.

If you send me a .SAZ file containing this traffic, I may be able to
help you build an inspector that takes apart this content.

On Mar 10, 6:45 am, term srv <term...@gmail.com> wrote:
> Hi Eric,
>
> Fiddler v2.3.2.1 beta, .NET 2.0.50727.4206, Vista Ultimate SP2 x86
>
> Thank you for continuing to work on this great tool! I am wondering if there
> is a way for Fiddler to gunzip any multipart gzip content. I did some
> research but I cannot find an answer. I am seeing requests similar to this:
>
> POSThttp://somehost/?somepost=somefileHTTP/1.1
> Accept: text/*
> Content-Type: multipart/form-data; boundary=--------------------someboundary
> Host: somehost
> Content-Length: 12345
> Cache-Control: no-cache
>
> ----------------------someboundary
> Content-Disposition: form-data; name="somefile"; filename="somefile.gz"
> Content-Type: application/x-gzip
> Content-Transfer-Encoding: gzip
>
> ((((((some gzip content))))))
> ----------------------someboundary--
>
> I searched the list and found an example but it's not for multipart.
>

> How to GZIP Decompress Http Requests?<%20https://groups.google.com/d/topic/httpfiddler/n0O9IyYaueU?fromgroups>