MBOX-Line: From tss at iki.fi  Tue Feb  8 10:05:35 2011
To: imap-protocol@u.washington.edu
From: Timo Sirainen <tss@iki.fi>
Date: Fri Jun  8 12:34:45 2018
Subject: [Imap-protocol] IMAP4 with deflate
In-Reply-To: <2609.1297185090.628987@Sputnik>
References: <4D5173F0.7030405@digitro.com.br> <2609.1297185090.628987@Sputnik>
Message-ID: <0D26F971-6164-4242-A89A-DCA329111789@iki.fi>

On 8.2.2011, at 19.11, Dave Cridland wrote:

> On Tue Feb  8 16:48:48 2011, Bruno M. Soares wrote:
>> I opened pcap file and there it is:
> 
> (This appears to be Cyrus IMAP)
> 
>> But I can't decompress de deflate part of file.
>> Can anyone give me a little help?
> 
> It's raw deflate blocks, so not either zlib or gzip - you need to write a small program using zlib directly, without the headers or checksums used by zlib.

If you want something ready-made, you can use doveadm utility from Dovecot v2.0. Since you of course don't want to mess up your existing installation, you can do e.g.:

./configure --prefix=/tmp/dovecot --with-zlib
make && make install
/tmp/dovecot/bin/doveadm -O -o mail_plugins=zlib dump -t imapzlib ~/imap-traffic.log


