[Oisf-users] suri 4 and http response/request bodies

[erik clark]

Are the response and request bodies now gunzip'd? Or are they still gzip
encoded. I ask because our biggest problem for analysts at the moment is
processing events where the payload printable is half gzip encoded, forcing
them to fall back on full pcap solutions.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20170629/1d6da1e5/attachment.html>