# Bro ids extract and decompress FlateDecode stream on pdf file in http flow ?

**URL:** <https://community.zeek.org/t/bro-ids-extract-and-decompress-flatedecode-stream-on-pdf-file-in-http-flow/1457>\
**Category:** Zeek\
**Created:** [November 19, 2008, 7:01am UTC](https://community.zeek.org/t/bro-ids-extract-and-decompress-flatedecode-stream-on-pdf-file-in-http-flow/1457 "2008-11-19T07:01:28Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![rmkml](https://avatars.discourse-cdn.com/v4/letter/r/df705f/32.png) [@rmkml](https://community.zeek.org/u/rmkml)\
**Post date:** [November 19, 2008, 7:01am UTC](https://community.zeek.org/t/bro-ids-extract-and-decompress-flatedecode-stream-on-pdf-file-in-http-flow/1457/1 "2008-11-19T07:01:28Z")

</div>

Hi,  
Anyone would have worked on extracting and decompressing FlateDecode stream on pdf file in http flow ?  
Regards  
Rmkml  
[Crusoe-Researches.com](http://Crusoe-Researches.com)

---

<div class="post-metadata">

**Author:** ![robin](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/robin/32/599_2.png) [@robin](https://community.zeek.org/u/robin)\
**Post date:** [November 19, 2008, 6:05pm UTC](https://community.zeek.org/t/bro-ids-extract-and-decompress-flatedecode-stream-on-pdf-file-in-http-flow/1457/2 "2008-11-19T18:05:00Z")

</div>

Do you mean extracting "deflate" compressed HTTP bodies? 1.4 is able  
to do that.

Robin

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:38pm UTC](https://community.zeek.org/t/bro-ids-extract-and-decompress-flatedecode-stream-on-pdf-file-in-http-flow/1457/3 "2022-05-06T15:38:48Z")

</div>


