[Oisf-users] suri 4 and http response/request bodies

erik clark philosnef at gmail.com
Thu Jun 29 16:20:31 UTC 2017

Are the response and request bodies now gunzip'd? Or are they still gzip
encoded. I ask because our biggest problem for analysts at the moment is
processing events where the payload printable is half gzip encoded, forcing
them to fall back on full pcap solutions.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20170629/1d6da1e5/attachment.html>

More information about the Oisf-users mailing list