it appears i was lying! (i think i was using the -d argument by mistake) when i have re-run decodeflow on the flow i get the following ..
> ./decodeflow 192.168.000.007.03689-192.168.000.006.01029
Reading headers for conv 0
got
Headers complete for conversation 0
Flow IS NOT compressed
Uncompressed size: 0
Reading headers for conv 1
got Content-Length: 141
Size of conv 1 is 141
got Expires: -1
got Cache-Co
got Content-Length: 7097
Size of conv 1 is 7097
got Expires: -1
got Cache-C
got
Headers complete for conversation 1
Flow IS NOT compressed
Uncompressed size: 7097
Bad tag: (00000016)
i then get the following files in the directory
-rw-r--r-- 1 bb bb 0 Nov 15 10:43 compressed.0
-rw-r--r-- 1 bb bb 7097 Nov 15 10:43 compressed.1
-rw-r--r-- 1 bb bb 0 Nov 15 10:43 decoded.0
-rw-r--r-- 1 bb bb 0 Nov 15 10:43 decoded.1
-rw-r--r-- 1 bb bb 0 Nov 15 10:43 uncompressed.0
-rw-r--r-- 1 bb bb 7097 Nov 15 10:43 uncompressed.1
unfortunately you previously said i should be interested in the ‘decoded’ file which appears to be empty!
what next?
db