Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit fcd3536

Browse files
committed
fix
1 parent 0c13a63 commit fcd3536

File tree

1 file changed

+5
-5
lines changed

1 file changed

+5
-5
lines changed

ics/pcap/mms_extract_file.rb

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -17,16 +17,16 @@
1717

1818
if extract_file
1919
# 查找文件对应的 invokeID
20-
invokeids = `tshark -r #{pcap_file} -Y 'mms.FileName_item == "#{extract_file}"' -Tfields -e mms.invokeID`.split.join(' ')
20+
invokeids = `tshark -r '#{pcap_file}' -Y 'mms.FileName_item == "#{extract_file}"' -Tfields -e mms.invokeID`.split.join(' ')
2121
# 对应 invokeID 的 frsmID
22-
frsmids = `tshark -r #{pcap_file} -Y 'mms.invokeID in {#{invokeids}} && mms.confirmedServiceResponse && mms.frsmID' -Tfields -e mms.frsmID`.split.join(' ')
22+
frsmids = `tshark -r '#{pcap_file}' -Y 'mms.invokeID in {#{invokeids}} && mms.confirmedServiceResponse && mms.frsmID' -Tfields -e mms.frsmID`.split.join(' ')
2323
# 通过 frsmID 查找到对应内容请求包
24-
invokeids = `tshark -r #{pcap_file} -Y 'mms.fileRead in {#{frsmids}} && mms.confirmedServiceRequest' -Tfields -e mms.invokeID`.split
24+
invokeids = `tshark -r '#{pcap_file}' -Y 'mms.fileRead in {#{frsmids}} && mms.confirmedServiceRequest' -Tfields -e mms.invokeID`.split
2525

2626
invokeids.each do |invokeid|
27-
hex_data = `tshark -r #{pcap_file} -Y 'mms.invokeID == #{invokeid} && mms.confirmedServiceResponse' -Tfields -e mms.fileData`
27+
hex_data = `tshark -r '#{pcap_file}' -Y 'mms.invokeID == #{invokeid} && mms.confirmedServiceResponse' -Tfields -e mms.fileData`
2828
p [hex_data].pack('H*')
2929
end
3030
else
31-
system "tshark -r #{pcap_file} -Y mms.FileName_item -Tfields -e mms.FileName_item | sort -u"
31+
system "tshark -r '#{pcap_file}' -Y mms.FileName_item -Tfields -e mms.FileName_item | sort -u"
3232
end

0 commit comments

Comments
 (0)