# --------------------------------------------------------------- # export2.rb - Export a single stream to a libpcap file # # usage : export2 #---------------------------------------------------------------- require 'win32ole' USAGE = "export2 " if ARGV.length != 3 puts USAGE exit 1 end FromDB = ARGV[0] ToFile = ARGV[1] StreamID = ARGV[2] UnsniffDB = WIN32OLE.new("Unsniff.Database") UnsniffDB.Open(FromDB) StmToExport = UnsniffDB.StreamIndex(StreamID) UnsniffDB.BeginExport( "libpcap", ToFile) UnsniffDB.ExportStream(StmToExport) UnsniffDB.EndExport() UnsniffDB.Close() print "Exported Stream #{StreamID} to libpcap/tcpdump file #{ToFile}"