File tree Expand file tree Collapse file tree 1 file changed +5
-5
lines changed Expand file tree Collapse file tree 1 file changed +5
-5
lines changed Original file line number Diff line number Diff line change 17
17
18
18
if extract_file
19
19
# 查找文件对应的 invokeID
20
- invokeids = `tshark -r #{ pcap_file } -Y 'mms.FileName_item == "#{ extract_file } "' -Tfields -e mms.invokeID` . split . join ( ' ' )
20
+ invokeids = `tshark -r ' #{ pcap_file } ' -Y 'mms.FileName_item == "#{ extract_file } "' -Tfields -e mms.invokeID` . split . join ( ' ' )
21
21
# 对应 invokeID 的 frsmID
22
- frsmids = `tshark -r #{ pcap_file } -Y 'mms.invokeID in {#{ invokeids } } && mms.confirmedServiceResponse && mms.frsmID' -Tfields -e mms.frsmID` . split . join ( ' ' )
22
+ frsmids = `tshark -r ' #{ pcap_file } ' -Y 'mms.invokeID in {#{ invokeids } } && mms.confirmedServiceResponse && mms.frsmID' -Tfields -e mms.frsmID` . split . join ( ' ' )
23
23
# 通过 frsmID 查找到对应内容请求包
24
- invokeids = `tshark -r #{ pcap_file } -Y 'mms.fileRead in {#{ frsmids } } && mms.confirmedServiceRequest' -Tfields -e mms.invokeID` . split
24
+ invokeids = `tshark -r ' #{ pcap_file } ' -Y 'mms.fileRead in {#{ frsmids } } && mms.confirmedServiceRequest' -Tfields -e mms.invokeID` . split
25
25
26
26
invokeids . each do |invokeid |
27
- hex_data = `tshark -r #{ pcap_file } -Y 'mms.invokeID == #{ invokeid } && mms.confirmedServiceResponse' -Tfields -e mms.fileData`
27
+ hex_data = `tshark -r ' #{ pcap_file } ' -Y 'mms.invokeID == #{ invokeid } && mms.confirmedServiceResponse' -Tfields -e mms.fileData`
28
28
p [ hex_data ] . pack ( 'H*' )
29
29
end
30
30
else
31
- system "tshark -r #{ pcap_file } -Y mms.FileName_item -Tfields -e mms.FileName_item | sort -u"
31
+ system "tshark -r ' #{ pcap_file } ' -Y mms.FileName_item -Tfields -e mms.FileName_item | sort -u"
32
32
end
You can’t perform that action at this time.
0 commit comments