THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

Compress capture file creates issues?

Is there issues related to using zip to compress a capture file? Is it a normal practice and is there any data loss when done from windows zip?

jmof217@gmail.com's avatar
1
[email protected]
asked 2020-10-20 16:45:04 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

2 Answers

0

If you use gzip compression, instead of zip, Wireshark is able to read the compressed file directly. Both gzip and zip uses lossless data compression, thus no data loss.

You may use a tool like 7zip to create gzip compressed files on Windows.

André's avatar
176
André
answered 2020-10-26 22:06:59 +0000
edit flag offensive 0 remove flag delete link

Comments

add a comment see more comments
0

First of all ZIP is a lossless data compression format, so no, there is no data loss compressing a capture file.

For archiving purposes it may be beneficial to compress a capture file, so that it takes less space in storage, obviously.

Wireshark can read compressed capture files straight from disk. It uses ZLib for this, so unless the Windows ZIP implementation does something non-standard that should be fine.

Jaap's avatar
13.7k
Jaap
answered 2020-10-20 21:00:49 +0000
edit flag offensive 0 remove flag delete link

Comments

There's Zip format and there's gzip format. Wireshark can read gzip format, using zlib; it can't read Zip format.

Guy Harris's avatar Guy Harris (2020-10-26 22:40:20 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer