From Forensics Wiki
Revision as of 23:42, 27 November 2013 by Joachim Metz
The gzip file format consists of:
- a 10-byte header, containing a magic number (1f 8b), a version number and a timestamp
- optional extra headers, such as the original file name,
- a body, containing a DEFLATE-compressed payload
- an 8-byte footer, containing a CRC-32 checksum and the length of the original uncompressed data.