title: Make wireshark packet readable -> JSON/octet-stream
body: <p>I'm trying to read a post request which got captured using wireshark. </p>
  
  <p>Now i was wondering, if there's a way to make the packet content readable, such as requests in fiddler to have readable data?</p>
  
  <p>I would appreciate any kind of suggestions.</p>
  
  <p>The captures packet(Wireshark->Follow TCP Stream):</p>
  
  <pre><code>POST /api// HTTP/1.1
  X-Unity-Version: 5.2.2f1
  GDataVer: v1
  Expires: 0
  Accept-Encoding: gzip
  Content-Type: application/octet-stream
  Connection: Keep-Alive
  Pragma: no-cache
  Cache-Control: no-cache
  User-Agent: xxx
  Host: xxx
  Content-Length: 576
  
  ..&gt;..d....S.y.....#.f..._t~N....j.@..0.....LI.:.%...j......C..F."8.P$...H./f......d.,.y..T.owGv...........yj..|a.....h.d=...M.,8.]'.a}.!....#.....R.O.  -l.....N..xr..T.s.+d.....O:...../..]..|.....bN...y..    1....4e)Q..{g...H....W....F..a..*|].....cvL.U.g..v3.5;.e...,.....2...lUSG........ b.V.a..).) &gt;_-`i7....Z~.B...)............K.|b.M.s3...T[..V.F..8.......z......Y.&lt;.
  .q.A.#.[...#z&gt;...A..o.a.2.=.o..M......~j...v,....q.p.M.......?_.    (.I&lt;.....t..).W.;.BKH...w......&gt;n...8=.......U.1..:.2...648........d.....zS.0t...v......R$..#
  .].2)..p..3...B...!.....].K..=3........4|.."j$^..HTTP/1.1 200 OK
  Content-Type: application/json
  Date: Sun, 21 May 2017 10:43:48 GMT
  Server: nginx/1.8.0
  X-Powered-By: PHP/5.5.15
  Content-Length: 80
  Connection: keep-alive
  
  C..........Q.6..3......]c..
  8.0.......L.......K...%8...z..Yw........V1.}...L.SI.POST /api// HTTP/1.1
  X-Unity-Version: 5.2.2f1
  GDataVer: v1
  Expires: 0
  Accept-Encoding: gzip
  Content-Type: application/octet-stream
  Connection: Keep-Alive
  Pragma: no-cache
  Cache-Control: no-cache
  User-Agent: xxx
  Host: xxx
  Content-Length: 576
  
  ..&gt;..d....S.y.....#.f..._t~N....j.@..0.....LI.:..........n;...Fa.7..'.n...i..   .."..h...u....F..H4.0..%p5.:..b.Q........_.o.........k...X.;:`c48.;.J........"n..........[............P...........5U_.F
  .|&amp;....
  ...Z.xs0.......K....U..Ay^.I..&amp;..e
  p.1B[....O~..   &lt;.%.Z..T2t..n..hS...U.g.;.?..1..6.$...w...._...\.4.W^).....mG........,)~..Ytw......E    ..'...#%`b;k.O..a.......3c...T....:...
  ~~$.&lt;{.../..~.V...C%.5...&amp;...%..3.PJ:T...7..c.&gt;.c..~ ,.....LT..-Z&lt;;/.I...\.B
  ......V..A.\...9&lt;Y?....8#.*.q...[OT%...k.&gt;.......4.. .....:.....L.)..&amp;:........... .,y.(.
  ..%.,.gl..+`.:..X.,.Q...r..Z..HTTP/1.1 200 OK
  Content-Type: application/json
  Date: Sun, 21 May 2017 10:43:50 GMT
  Server: nginx/1.8.0
  X-Powered-By: PHP/5.5.15
  Content-Length: 256
  Connection: keep-alive
  
  d4{X.M...A..4.$'.Uj.].N"..-LI.......~A.........^.*
  [....z.vN...+k...L.f.S..I'l......I`F..r'..6..
  ....5..i/].?..:..g"6.uP.^...)e.V.X....&amp;........$$9...r...!....V.C._.f...&amp;....&amp;Vo%.-...7[.S.Q..;.$Fo......m.g.K..c.. ........j.........E.F...Zn.we4.2s..p.VR.V..POST /api// HTTP/1.1
  X-Unity-Version: 5.2.2f1
  GDataVer: v1
  Expires: 0
  Accept-Encoding: gzip
  Content-Type: application/octet-stream
  Connection: Keep-Alive
  Pragma: no-cache
  Cache-Control: no-cache
  User-Agent: xxx
  Host: xxx
  Content-Length: 576
  
  ..&gt;..d....S.y.....#.f..._t~N....j.@..0.....LI.:.%...j......C..F."8.P$...H./f......d.,.y..T.owGv...........yj..|a.....h.d=...M.,8.]'.a}.!....#.....R.O.  -l.....N..xr..T.s.+d.....O:...../..]..|.....bN...y..    1....4e)Q..{g...H....W....F..a..*|].....cvL.U.g..v3.5;.e...,.....2...lUSG........ b.V.a..).) &gt;_-`i7....Z~.B...)............K.|b.M.s3...T[..V.F..8.......z......Y.&lt;.
  .q.A.#.[...#z&gt;...A..o.a.2.=.o..M......~j...v,....q.p.M.......?_.    (.I&lt;.....t..).W.;.BKH...w......&gt;n...8=.......U.1..:.2...648........d.....zS.0t...v......R$..#
  .].2)..p..3...B...!.....].K..=3........4|.."j$^..HTTP/1.1 200 OK
  Content-Type: application/json
  Date: Sun, 21 May 2017 10:43:48 GMT
  Server: nginx/1.8.0
  X-Powered-By: PHP/5.5.15
  Content-Length: 80
  Connection: keep-alive
  
  C..........Q.6..3......]c..
  8.0.......L.......K...%8...z..Yw........V1.}...L.SI.POST /api// HTTP/1.1
  X-Unity-Version: 5.2.2f1
  GDataVer: v1
  Expires: 0
  Accept-Encoding: gzip
  Content-Type: application/octet-stream
  Connection: Keep-Alive
  Pragma: no-cache
  Cache-Control: no-cache
  User-Agent: xxx
  Host: xxx
  Content-Length: 576
  
  ..&gt;..d....S.y.....#.f..._t~N....j.@..0.....LI.:..........n;...Fa.7..'.n...i..   .."..h...u....F..H4.0..%p5.:..b.Q........_.o.........k...X.;:`c48.;.J........"n..........[............P...........5U_.F
  .|&amp;....
  ...Z.xs0.......K....U..Ay^.I..&amp;..e
  p.1B[....O~..   &lt;.%.Z..T2t..n..hS...U.g.;.?..1..6.$...w...._...\.4.W^).....mG........,)~..Ytw......E    ..'...#%`b;k.O..a.......3c...T....:...
  ~~$.&lt;{.../..~.V...C%.5...&amp;...%..3.PJ:T...7..c.&gt;.c..~ ,.....LT..-Z&lt;;/.I...\.B
  ......V..A.\...9&lt;Y?....8#.*.q...[OT%...k.&gt;.......4.. .....:.....L.)..&amp;:........... .,y.(.
  ..%.,.gl..+`.:..X.,.Q...r..Z..HTTP/1.1 200 OK
  Content-Type: application/json
  Date: Sun, 21 May 2017 10:43:50 GMT
  Server: nginx/1.8.0
  X-Powered-By: PHP/5.5.15
  Content-Length: 256
  Connection: keep-alive
  
  d4{X.M...A..4.$'.Uj.].N"..-LI.......~A.........^.*
  [....z.vN...+k...L.f.S..I'l......I`F..r'..6..
  ....5..i/].?..:..g"6.uP.^...)e.V.X....&amp;........$$9...r...!....V.C._.f...&amp;....&amp;Vo%.-...7[.S.Q..;.$Fo......m.g.K..c.. ........j.........E.F...Zn.we4.2s..p.VR.V..
  </code></pre>
  
  <p>Also the Line-based text data can't be read as can be seen in the following screenshot:
  <a href="https://i.stack.imgur.com/TJ28C.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/TJ28C.png" alt="enter image description here"></a></p>
  
  <p><strong>EDIT:</strong></p>
  
  <p>Been able to save the files using wireshark (File | Export Objects | HTTP), some files show up normal and can be read. Oters sadly cant be read, they're looking like this:</p>
  
  <pre><code>S]þAc—ùÛC:¬òlõ=Y¨–àž½WŒiîø®–Xæ.ÎÐ­dc½d·šGj~÷RSb(ÞvÌè–Q³—¨·wŸ/Ôü:V¸  _×´DÙmœÖÉ%¶¿£ì¹#q23ò[PÇ»äi£Aì³¬Mçòç¬Ta5„¥n
  .   Ñ/¬Y w£l*ÿÁ&lt;ÞdBø¯]4q6Ÿšr‘nfDôBá"!.Ø"Nu³ºX°Ìì{·U
  ,iÃ²èë’
  fsì%bÆÁ¼IG›Yfñ  7±Ì÷IP×u})ÛûŠöîd±õßkä²ÅÚÐâ"ç—òŸ•a¢tå‘`Í¸@ðÁýžË&lt;g\ƒáÌÀ€™¶=²Êuf£&lt;…Äß/Y'ÅšÂÅêUµ¡)!±Í‹Dòå&amp;dg“ÂìËÚw"¾ÑgŽpŸtÈ€#\I¤³
  0¬ykøµ{x6Ý{§fbì„²~Ì6!íç4“Ðás$òç_4;Fwk4Pþ¼;CG˜œØ³) ¨Ø6a°l¯&gt;«wàþæá¢œà¬Ø];µÅøŒÎÛaø'Žj¢;âO,Ú^½´dÎÁoMNú¢Þ¨éàä‘Æ62ñ™ü¥nœe$"·_ç$²ÓÝ    ÿ Ýi%P§‹“¼“¸Ö£N³ƒ ·°Üqc”¡xdª­CÐë&lt;¨~#PÜcQS”|'}ËóJ–÷(ñžÍ÷+åqš—¯ÅÐaâù.ÖL™@°_ö¾¦ó*Õï¤è‚ ¥8ðòC(y€k6¦tÁŸŒiãM}v9%Üâ’ò\Û\qx©LTa0ÚŽ#Ð&gt;šlºmªÇcdyé(¡ˆÜV*ýôüÇá&amp;3¯ô¹á—dþìÙ.½†d+í;{õ
  ¯óÔB^]ØÆB ‚ú7Uàµ&amp;Y
  ‘Ê’‡l,æ,P#†ªrY¨C&gt;¿÷pˆsEÓ%&gt;Q/&amp;…^öc‚hí÷Ð®Ÿ]7é/ë|Àe~#¯‰5÷¥?ýg€ÙþLìoí%¦4³›ünw4P4Æ1â2Iìì"&lt;M÷…EÉÆ‹¤Ö/ØL™•7f/1|;¶h–‹L~$¤¦EDox² ¤¢°˜    ²dÂz`)ì¶å(V¡´¥¼KÅDg~öÇÚîŽîMâhd¾Ô$´Ï•¢HÀI?Ê•Z6ÁÊ=4Ó·®pÝÈ¨³šã2 ê¡ HÕ©bà&amp;2Ë=¥êËì7doøsÿ2ÀŒùmv†Ú7b¢ ÷…õÁ*„Í¿þÇ}¹ÌåXf[±ÂÎAîá=¯ÝÚ°¿)gÇé™ÑèXHÜ7€8úª6Vì(ù%`®jSC€çÕâ*W»@Ý‚h6ƒGRsmå#I:ÚžÕýþu]Ö{ÚÊÌd§‡\š”õ/y#~|†è¸•½†yËy¦A+:ùU .    µ~:&lt;”‚q®¬ÿ
   jl.Â'âCº
  §¿$¸××\¬^ÙÐ8ª*r±&gt;‘ÅU(—•ï6ÛóCq^ÚÍ¯øl{ß›«ëîu?µhP×AíþñQìŒA
  a!R´CÝŠ°Ó÷YŸšþ–²¢9Ç·ƒÙ/©ÜJ]âµÛ­&amp;Ó©lùÄÏÜÁMpqþg‹Ö=HíXŸ¬ŒL‘L£ªR2…®Ë@ ÎJ{ó‚('ˆl²j¯R`Ø:i=m Šú¢{Ú©Ní´ƒÛ¿X,…Q‡´rZÕ
  </code></pre>
  
  <p>What could cause this? Is there a way to read it properly?</p>