#!/usr/bin/perl use strict; use Net::TcpDumpLog; my $log = Net::TcpDumpLog->new(); $log->read( "/my/tracefile.pcap" ); my $maxindex = $log->maxindex(); my $gzip = 0; foreach my $index ( 0..$maxindex ) { my ( $length_orig, $length_incl, $drops, $seconds, $milliseconds ) = $log->header( $index ); my $data = $log->data( $index ); if (( $data =~ /Transfer-Encoding: chunked/g ) && ( $data =~ /Content-Encoding: gzip/g )) { $gzip++; print $index + 1 . "\t$length_orig\t$length_incl\t$seconds\t$milliseconds\n"; print "\t$data\n\n"; } } print "$gzip chunked-gzip packets.";