Attempting to run anastm I got the following error:

> anastm 4MB.unsf 32 In
> anastm.rb:432:in `method_missing': Open (WIN32
OLERuntimeError)
OLE error code:80004005 in Unsniff.Database.1
Open Database: Invalid Database File
HRESULT error code:0x80020009
Exception occurred.

The 4MB.usnf data file (10MB file from ~4MB of data) is in the same directory as anastm.rb. I tried several different stream nos. (1, 10, 32) since I wasn't certain how to identify the correct stream.

Any help is appreciated.

Thanks,
Kevin

Hi,

Close the main Unsniff Application while running this script.

We will be putting up a beta-2 release tonite, that will allow you to run scripts and the Unsniff application simultaneously.

Unsniff tracks entire TCP streams in the \"Streams\" sheet(see the bottom of the capture window). Switch to the streams sheet. You will find a list of TCP sessions. You can note down the session number which you want to analyze.

Thanks,
Vivek

Hi Vivek,

Thanks for your very fast reply.

> Unsniff tracks entire TCP streams in the \"Streams\" sheet(see the bottom
> of the capture window). Switch to the streams sheet. You will find a list
> of TCP sessions. You can note down the session number which you want to analyze.

When there's just one session I'm able to view the data correctly in the Stream Analyzer. However, I'm having trouble when there are multiple sessions. Attached (I hope) is an example with multiple sessions displayed in the \"Sessions\" sheet, along with the Stream Analyzer output from \">anastm.rb 4MB.usnf 10 In\" which doesn't seem to match the Session.

Thanks,
Kevin<br><br>Post edited by: cattledogit, at: 2006/02/19 14:48

Hopefully the files are attached here.

&lt;60KB sessions file attached this time I hope.

Stream analysis display image file attached. <br><br>Post edited by: cattledogit, at: 2006/02/19 15:13