Hi:
I downloaded a few .pcap files from http://malware-traffic-analysis.net.
I noticed that Fiddler would complain about CRC mismatch when decoding some gzip streams, and hence it won't display the decoded stream.
I am not quite sure whether the CRC is really wrong, however, looks like IE would decode regardless (since I have no trouble to replay it).
I attached one here. Session 1, session 3 are complained by Fiddler. (I am using the latest version 4.6.3.50306)
Password "infected"