Edit C:\Windows\System32\zh-CN\nettrace.dll.mui
MZ? ?? ? @ ? ? ? ?!?L?!This program cannot be run in DOS mode. $ ??3}?3}?3}???3}???3}?ich?3}? PE L ? ! ? ? H" @ ? .rsrc ? ? @ @ H ?8 ? P ? ? ? ? ? ? ( ? x @ ?~ X ?? p ?? ? ?? ? ?? ? ?? ? ?? ? ?? ?? ?? 0 ?? H ?? ` ?? x ?? ? ?? ? ? ? ? ? ? P ?? ? ( 8 H X h x ? ? ? ? ? ? ? ? ( 8 ? ? ? 8 @ ? x ? |2 f ? ?4 ^ ? D: v ? ?; F ? C ? ? ? ?! ? ? ? ? ? ? 8? ? ? ? ? ? ? ? ? h? F ? ? ? ? 4 ? ? < ? @? ? ? ? ? ? M U I M I N I R E P O R T T E M P L A T E . H T M L ??? T5E?#|6?&? +?7d?>wL+???. ? ? ? M U I z h - C N R???0?? z???*?r`0 /T??*?0 ? % 1 ! s ! _??*?0 (u?: t r a c e s t a r t [ [ s c e n a r i o = ] < s c e n a r i o 1 , s c e n a r i o 2 > ] [ [ g l o b a l K e y w o r d s = ] k e y w o r d s ] [ [ g l o b a l L e v e l = ] l e v e l ] [ [ c a p t u r e = ] y e s | n o ] [ [ c a p t u r e t y p e = ] p h y s i c a l | v m s w i t c h | b o t h ] [ [ r e p o r t = ] y e s | n o | d i s a b l e d ] [ [ p e r s i s t e n t = ] y e s | n o ] [ [ t r a c e F i l e = ] p a t h \ f i l e n a m e ] [ [ m a x S i z e = ] f i l e m a x s i z e ] [ [ f i l e M o d e = ] s i n g l e | c i r c u l a r | a p p e n d ] [ [ o v e r w r i t e = ] y e s | n o ] [ [ c o r r e l a t i o n = ] y e s | n o | d i s a b l e d ] [ c a p t u r e f i l t e r s ] [ [ p r o v i d e r = ] p r o v i d e r I d O r N a m e ] [ [ k e y w o r d s = ] k e y w o r d M a s k O r S e t ] [ [ l e v e l = ] l e v e l ] [ [ [ p r o v i d e r = ] p r o v i d e r 2 I d O r N a m e ] [ [ p r o v i d e r F i l t e r = ] y e s | n o ] ] [ [ k e y w o r d s = ] k e y w o r d 2 M a s k O r S e t ] [ [ p e r f M e r g e = ] y e s | n o ] [ [ l e v e l = ] l e v e l 2 ] . . . ??<P: c a p t u r e = n o ( c?d?N?*?N?KNY/f&T ?/T(upencSUc?) c a p t u r e t y p e = p h y s i c a l ( c?/f ??N:NirtQ???V/T(upencSUc? ? ?:NZ?b?bc:g/T(upencSUc? ? ?/f ??:N???/T(upencSUc?) r e p o r t = n o ( c?/f&T(W ub?*?e?? T? ? ube?Q?JT) p e r s i s t e n t = n o ( c??*?O?(W??_?KNT/f&T???L? ? ??(W?? n e t s h t r a c e s t o p KNMR/f&T/T(u) m a x S i z e = 2 5 0 M B ( c? g'Y?*?e?'Y\ ?0 = ? g'Y<P) f i l e M o d e = c i r c u l a r o v e r w r i t e = y e s ( c?/f&T??? g?*? ????) c o r r e l a t i o n = y e s ( c?/f&TsQT??sQ?? v^\?????T(W Nw?) p e r f M e r g e = y e s ( c?/f&T\'`?CQpencTv^0R ?*?-N) t r a c e F i l e = % % L O C A L A P P D A T A % % \ T e m p \ N e t T r a c e s \ N e t T r a c e . e t l ( c??????MOn) p r o v i d e r F i l t e r = n o ( c?/f&T/T(u?? z?[{ ?V) d??SL?c? ?&TR ??? z?sQ.?[hQ???:N N?? 2 5 5 *NW[&{0 ??: n e t s h t r a c e s t a r t s c e n a r i o = I n t e r n e t C l i e n t c a p t u r e = y e s (W?:NirtQ???V/T(upencSUc?T ? _??*? I n t e r n e t C l i e n t ?Hh??sQ?? z?0 (W?? " n e t s h t r a c e s t o p " }T?b??_???? ? \\Pbk?*?0 ????\O(u??MOn? T?0??X[(W??? ? \?????0 n e t s h t r a c e s t a r t p r o v i d e r = m i c r o s o f t - w i n d o w s - w l a n - a u t o c o n f i g k e y w o r d s = s t a t e , u t : a u t h e n t i c a t i o n _??*? m i c r o s o f t - w i n d o w s - w l a n - a u t o c o n f i g ?? z? (W?? " n e t s h t r a c e s t o p " }T?b??_???? ? \\Pbk?*?0 ????\O(u??MOn? T?0??X[(W??? ? \?????0 \??U_wQ g " s t a t e " b " u t : a u t h e n t i c a t i o n " sQ.?[???0 n e t s h t r a c e s h o w p r o v i d e r }T??(u?>f:y /ec?sQ.?[??+R0 Uc?[{ ?V: ? g(WO(u c a p t u r e = y e s >f_/T(uUc?? ? Mb/ecUc?[{ ?V0O(u " n e t s h t r a c e s h o w C a p t u r e F i l t e r H e l p " ??>f:y /ec?Uc?[{ ?V?vQ(u??Rh?0 ?? z?[{ ?V: Y*N?? z?/ec?? z?[{ ?V v^N(W?*N?? z?KNTO(u p r o v i d e r F i l t e r = Y e s /T(u???[{ ?V0 O(u " n e t s h t r a c e s h o w P r o v i d e r F i l t e r H e l p " ??>f:y ?*N?? z?/ec??? z?[{ ?V?vQ(u??Rh?0 \Pbk?*?0 ' % 1 ! s ! \Pbk?*?0 Y?: \PbkS_MRck(W?L??*?O??Q? \?*?e?l?c:N H T M L ?JT0 ? % 1 ! s ! \?*?e?l?c:N H T M L ?JT0 (u?: c o n v e r t [ i n p u t = ] t r a c e f i l e n a m e . e t l [ [ o u t p u t = ] f i l e n a m e ] [ [ d u m p = ] C S V | X M L | E V T X | T X T | N o ] [ [ r e p o r t = ] y e s | n o ] [ [ o v e r w r i t e = ] y e s | n o ] [ [ t m f p a t h = ] p a t h n a m e ] ?pe: h? <P i n p u t - ?eQ E T L ?*?e? o u t p u t - ???? T( ??<P:N?eQ T?) d u m p - ??<h_( ??<P = T X T ) r e p o r t - ub H T M L ?JT( ??<P = n o ) o v e r w r i t e - ??? g??( ??<P = n o ) t m f p a t h - (u??x W P P ?*?v t m f ????? Y?: \?eQ E T L ??l?c:Nc??<h_0 /T???O?0 % 1 ! s ! /T???O?0 (u?: d i a g n o s e [ s c e n a r i o = ] < s c e n a r i o n a m e > [ [ n a m e d A t t r i b u t e = ] < a t t r i b u t e V a l u e > ] [ [ s a v e S e s s i o n T r a c e = ] < y e s | n o > ] [ [ r e p o r t = ] < y e s | n o > ] [ [ c a p t u r e = ] < y e s | n o > ] ??<P: s a v e S e s s i o n T r a c e = n o ( ??c? r e p o r t = y e s ?R??<P:N y e s ) c a p t u r e = n o r e p o r t = n o Y?: /T???O? \?*?e?ck8^Sb[{ ?:N??????0 ? % 1 ! s ! \?*?e?ck8^Sb[{ ?:N??????0 (u?: t r a c e c o r r e l a t e [ i n p u t = ] t r a c e f i l e n a m e . e t l [ o u t p u t = ] n e w t r a c e f i l e n a m e . e t l [ [ f i l t e r = ] A c t i v i t y _ I D ] [ [ o v e r w r i t e = ] y e s | n o ] [ [ r e t a i n c o r r e l a t i o n e v e n t s = ] y e s | n o ] [ [ r e t a i n p i i = ] y e s | n o ] [ [ r e t a i n g l o b a l e v e n t s = ] y e s | n o ] ?pe: h? <P i n p u t - ?eQ E T L ?*?e? o u t p u t - ???? T f i l t e r - ???Ndk;m? G U I D gsQ??? o v e r w r i t e - ??? g?? r e t a i n c o r r e l a t i o n e v e n t s - ?Yu?sQ?? r e t a i n p i i - ?YuS+T*N?h??o`??? r e t a i n g l o b a l e v e n t s - ?YuhQ@\?? ??<P: f i l t e r = n o n e o v e r w r i t e = n o r e t a i n c o r r e v e n t s = n o r e t a i n p i i = y e s r e t a i n g l o b a l e v e n t s = y e s Y?: [{ ?V;m? I D /f?(u{ x x x x x x x x - x x x x - x x x x - x x x x - x x x x x x x x x x x x } <h_h?:y? N*N G U I D *N?h??o`S?pencSUc??? Tv^?*?e?v^??&{?CQpenc0 ? % 1 ! s ! Tv^?*?e?v^??&{?CQpenc0 (u?: m e r g e i n p u t 1 . e t l i n p u t 2 . e t l . . . o u t p u t . e t l ?pe: ?Tv^? E T L ??Rh? ?Rh?-N? gT N*N??/f?? Y?: Tv^??v^?eQ&{?? P e r f T r a c k CQpenc0 PA >f:y?*??0 % 1 ! s ! >f:y?*??0 >f:y?(u??Hh0 % % 1 ! s ! >f:y??N s t a r t }T? Nw?O(u??(u?HhRh?0 >f:y?Hh?o`0 ? % 1 ! s ! >f:y?Hh?o`0 (u?: t r a c e s h o w s c e n a r i o [ n a m e = ] < s c e n a r i o n a m e > Y?: ?>f:y gsQ?*N?Hh?vQ? ?o` ?S? d i a g n o s e }T??? ??v?UO^\'`?c??Hh/ec ??? z?Rh?N?\?(u? ??sQ.?[??+R0 >f:y?(u??? z?0 PA( % 1 ! s ! >f:y??N s t a r t }T? Nw?O(u??(u?? z??Rh?0 >f:y?? z??o`0 ? % 1 ! s ! >f:y??N s t a r t }T? Nw?O(u??? z??o`0 (u?: t r a c e s h o w p r o v i d e r [ n a m e = ] < p r o v i d e r I d O r N a m e > Y?: ?>f:yc??? z?/ec?sQ.?[ ??+R0??(W/T??*?O??0 O(u??sQ.?[??+R R?hQ@\sQ.?[??+R0 W % 1 ! s ! >f:y??N s t a r t }T? Nw?O(u? hQ@\sQ.?[??+R?Rh?0 (u?: t r a c e s h o w g l o b a l K e y w o r d s A n d L e v e l s R??(u???0 2 % 1 ! s ! >f:yQ????Rh?0 (u?: t r a c e s h o w i n t e r f a c e s R?/ec?Uc?[{ ?V?(u?0 > % 1 ! s ! R?/ec?Uc?[{ ?V?(u?0 (u?: t r a c e s h o w C a p t u r e F i l t e r H e l p >f:y.^? z?{|?o`0 ? % 1 ! s ! >f:y.^? z?{| T?0?????^\.^? z?{|?Rh?0 ?R??.^? z?{|????????9h,g?? ?? Y0 (u?: t r a c e s h o w h e l p e r c l a s s [ n a m e = ] < h e l p e r c l a s s n a m e > R??/ec??? z?[{ ?V?vQ(u?0 : % 1 ! s ! R??/ec??? z?[{ ?V?vQ(u?0 (u?: ?*?>f:y P r o v i d e r F i l t e r H e l p PA K ?*??: - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - ??MOn = % 1 ! s ! S ?(u??Hh( % 1 ! d ! ) : - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - PA eQ??: % 1 ! w s ! ?? z? - - - - - - - - - T ?(u??? z?( % 1 ! d ! ) - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - % T?: % 1 ! s ! ?? z? G U I D : % 2 ! s ! W ?+R( <P) - % 1 ! d ! *NCQ } - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Y sQ.?[( ?x) - % 1 ! d ! *NCQ } - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - ?*?O??b?\Pbk0 ?`: ck(W?L? ?*?e?: % 1 ! s ! D?R: % 2 ! s ! ??: % 3 ! s ! g'Y'Y\: % 4 ! s ! ?JT: % 5 ! s ! ` ?? z?: T?: % 1 ! s ! ??FU G U I D : % 2 ! s ! ?+R: % 3 ! s ! sQ.?[: % 4 ! s ! ` ?? z?: T?: % 1 ! s ! ?? z? G u i d : % 2 ! s ! ???+R: % 3 ! s ! ??sQ.?[: % 4 ! s ! ?JTMOn = % 1 ! s ! 9 ?eQ??: % 1 ! s ! l?P??: % 2 ! s ! l?P<h_: % 3 ! s ! ?JT??: % 4 ! s ! V ??: % 1 ! w s ! ?? G U I D : % 2 ! S ! ??"}_: % 3 ! d ! ?? L u i d : 0 x % 4 ! I 6 4 X ! g ^\'` T {|? ? ? ?f - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - PA ???9h,g??: % 1 ! d ! ' 9h,g?? # % 1 ! d ! - - - - - - - - - - - - - - % 2 ! w s ! ?(u? Y: % 1 ! d ! - ? Y # % 1 ! d ! - - - - - - - - - - % 2 ! w s ! ck(W?? % 1 ! w s ! . . . ?b ?? % 1 ! w s ! N D F ?*?e?: % 1 ! w s ! N D F ?JT??: % 1 ! w s ! ck(W ubpenc?T??JT. . . ck(W ubl?P. . . ?b 1Y%?( ??= 0 x % 1 ! X ! ) " Uc?[{ ?V: ? g(WO(u c a p t u r e = y e s >f_ /T(uUc??Mb/ecUc?[{ ?V0/ec?Uc?[{ ?V:N: C a p t u r e I n t e r f a c e = < i n t e r f a c e n a m e o r G U I D > ?c???? T?b G U I D /T(upencSUc?0O(u n e t s h t r a c e s h o w i n t e r f a c e s ?R??(u??0 ?? C a p t u r e I n t e r f a c e = { 7 1 6 A 7 8 1 2 - 4 A E E - 4 5 4 5 - 9 D 0 0 - C 1 0 E F D 2 2 3 5 5 1 } ?? C a p t u r e I n t e r f a c e = ! { 7 1 6 A 7 8 1 2 - 4 A E E - 4 5 4 5 - 9 D 0 0 - C 1 0 E F D 2 2 3 5 5 1 } ?? C a p t u r e I n t e r f a c e = " L o c a l A r e a C o n n e c t i o n " E t h e r n e t . A d d r e s s = < M A C a d d r e s s > Oc?[{ ?VN???h M A C 0W@W9SM?0 ?? E t h e r n e t . A d d r e s s = 0 0 - 0 D - 5 6 - 1 F - 7 3 - 6 4 E t h e r n e t . S o u r c e A d d r e s s = < M A C a d d r e s s > Oc?[{ ?VN? M A C 0W@W?9SM?0 ?? E t h e r n e t . S o u r c e A d d r e s s = 0 0 - 0 D - 5 6 - 1 F - 7 3 - 6 4 E t h e r n e t . D e s t i n a t i o n A d d r e s s = < M A C a d d r e s s > Oc?[{ ?VN?h M A C 0W@W?9SM?0 ?? E t h e r n e t . D e s t i n a t i o n A d d r e s s = 0 0 - 0 D - 5 6 - 1 F - 7 3 - 6 4 E t h e r n e t . T y p e = < e t h e r t y p e > Oc?[{ ?VN M A C ?*Y{|??9SM?0 ?? E t h e r n e t . T y p e = I P v 4 ?? E t h e r n e t . T y p e = N O T ( 0 x 8 6 D D ) ?? E t h e r n e t . T y p e = ( I P v 4 , I P v 6 ) W i f i . T y p e = < M a n a g e m e n t | D a t a > Oc?[{ ?VN W i f i {|?9SM?0AQ??<P /f M a n a g e m e n t ? D a t a 0??*gc? ?R N?(u W i f i . T y p e [{ ?V0 ?a: ?Uc?[{ ?V N/ec?V0Rh?bBl?0 ?? W i f i . T y p e = M a n a g e m e n t P r o t o c o l = < p r o t o c o l > Oc?[{ ?VN I P OS??9SM?0 ?? P r o t o c o l = 6 ?? P r o t o c o l = ! ( T C P , U D P ) ?? P r o t o c o l = ( 4 - 1 0 ) I P v 4 . A d d r e s s = < I P v 4 a d d r e s s > Oc?[{ ?VN? I P v 4 0W@W??h I P v 4 0W@W9SM?0 ?? I P v 4 . A d d r e s s = 1 5 7 . 5 9 . 1 3 6 . 1 ?? I P v 4 . A d d r e s s = ! ( 1 5 7 . 5 9 . 1 3 6 . 1 ) ?? I P v 4 . A d d r e s s = ( 1 5 7 . 5 9 . 1 3 6 . 1 , 1 5 7 . 5 9 . 1 3 6 . 1 1 ) I P v 4 . S o u r c e A d d r e s s = < I P v 4 a d d r e s s > Oc?[{ ?VN? I P v 4 0W@W?9SM?0 ?? I P v 4 . S o u r c e A d d r e s s = 1 5 7 . 5 9 . 1 3 6 . 1 I P v 4 . D e s t i n a t i o n A d d r e s s = < I P v 4 a d d r e s s > Oc?[{ ?VN?h I P v 4 0W@W?9SM?0 ?? I P v 4 . D e s t i n a t i o n A d d r e s s = 1 5 7 . 5 9 . 1 3 6 . 1 I P v 6 . A d d r e s s = < I P v 6 a d d r e s s > Oc?[{ ?VN? I P v 6 0W@W??h I P v 6 0W@W9SM?0 ?? I P v 6 . A d d r e s s = f e 8 0 : : 5 0 3 8 : 3 c 4 : 3 5 d e : f 4 c 3 \ % % 8 ?? I P v 6 . A d d r e s s = ! ( f e 8 0 : : 5 0 3 8 : 3 c 4 : 3 5 d e : f 4 c 3 \ % % 8 ) I P v 6 . S o u r c e A d d r e s s = < I P v 6 a d d r e s s > Oc?[{ ?VN? I P v 6 0W@W?9SM?0 ?? I P v 6 . S o u r c e A d d r e s s = f e 8 0 : : 5 0 3 8 : 3 c 4 : 3 5 d e : f 4 c 3 \ % % 8 I P v 6 . D e s t i n a t i o n A d d r e s s = < I P v 6 a d d r e s s > Oc?[{ ?VN?h I P v 6 0W@W?9SM?0 ?? I P v 6 . D e s t i n a t i o n A d d r e s s = f e 8 0 : : 5 0 3 8 : 3 c 4 : 3 5 d e : f 4 c 3 \ % % 8 C u s t o m M a c = < t y p e ( o f f s e t , v a l u e ) > Oc?[{ ?VN? M A C h4Y _??c? OP???<P9SM?0 ?a: ?Uc?[{ ?V N/ec?V0Rh?bBl?0 ?? C u s t o m M a c = U I N T 8 ( 0 x 1 , 0 x 2 3 ) ?? C u s t o m M a c = A S C I I S T R I N G ( 3 , t e s t ) ?? C u s t o m M a c = U N I C O D E S T R I N G ( 2 , t e s t ) C u s t o m I p = < t y p e ( o f f s e t , v a l u e ) > Oc?[{ ?VN? I P h4Y _??c? OP???<P9SM?0 ?a: ?Uc?[{ ?V N/ec?V0Rh?bBl?0 ?? C u s t o m I p = U I N T 1 6 ( 4 , 0 x 3 2 0 1 ) ?? C u s t o m I p = U I N T 3 2 ( 0 x 2 , 1 8 9 3 2 ) C a p t u r e M u l t i L a y e r = < y e s | n o > /T(uYB\pencSUc?0 ?a: ?Uc?[{ ?V N/ec?V0Rh?bBl?0 P a c k e t T r u n c a t e B y t e s = < v a l u e > ?Uc??*NpencSc?pe??W[?0 ?a: ?Uc?[{ ?V N/ec?V0Rh?bBl?0 ?? P a c k e t T r u n c a t e B y t e s = 4 0 H ?a: ?? T?O(uY*N[{ ?V0FO/f ? N?? ? YO(u? T?[{ ?V0 ?? ' n e t s h t r a c e s t a r t c a p t u r e = y e s E t h e r n e t . T y p e = I P v 4 I P v 4 . A d d r e s s = 1 5 7 . 5 9 . 1 3 6 . 1 ' ??e ? ??>f_c?[{ ?V0??*gc? [{ ?V ?R\?:N ?eu 0 ?? ' n e t s h t r a c e s t a r t c a p t u r e = y e s I P v 4 . S o u r c e A d d r e s s = 1 5 7 . 5 9 . 1 3 6 . 1 ' ?\?? 1 5 7 . 5 9 . 1 3 6 . 1 -NUc? I P v 4 pencS ? ?\Uc?wQ g^? I P v 4 ?*YQ{|??pencS ??:N *g>f_c? E t h e r n e t . T y p e [{ ?V0 ?? ' n e t s h t r a c e s t a r t c a p t u r e = y e s I P v 4 . S o u r c e A d d r e s s = 1 5 7 . 5 9 . 1 3 6 . 1 E t h e r n e t . T y p e = I P v 4 ' ?\?? 1 5 7 . 5 9 . 1 3 6 . 1 -NUc? I P v 4 pencS0\>e_ wQ gvQ??*YQ{|??pencS ??:N?c?>f_ [{ ?V0 Uc?[{ ?V/ec?V0Rh?TBl?( d??SL? c?) 0 ?? R a n g e : ' n e t s h t r a c e s t a r t c a p t u r e = y e s E t h e r n e t . T y p e = I P v 4 P r o t o c o l = ( 4 - 1 0 ) ' ?\Uc?OS?(W 4 ?1 0 KN?( S? 4 ? 1 0 ) ? I P v 4 pencS0 ?? L i s t : ' n e t s h t r a c e s t a r t c a p t u r e = y e s E t h e r n e t . T y p e = ( I P v 4 , I P v 6 ) ' ?\?Uc? I P v 4 ? I P v 6 pencS0 ?? N e g a t i o n : ' n e t s h t r a c e s t a r t c a p t u r e = y e s E t h e r n e t . T y p e = ! I P v 4 ' ?\Uc?@b g^? I P v 4 *NpencS0 (W???? NBl???NRh?~T0 ?? ' n e t s h t r a c e s t a r t c a p t u r e = y e s E t h e r n e t . T y p e = ! ( I P v 4 , I P v 6 ) ' ?\Uc?@b g^? I P v 4 ?^? I P v 6 pencS0 ?O(u N O T eg??f ! ?c:yBl?0? ?? \?Bl??<P(u???w?g0 ?? ' n e t s h t r a c e s t a r t c a p t u r e = y e s E t h e r n e t . T y p e = N O T ( I P v 4 ) ' T?: % 1 ! w s ! ??: % 2 ! w s ! G ?V?v.^? z?{|: .^? z?{| T? ?f - - - - - - - - - - - - - - - - - - - - - - - - - - - - ; 9h,g?? % 1 ! d ! / % 2 ! d ! - - - - - - - - - - - - - - - - ?f: % 3 ! w s ! I D : % 4 ! w s ! E ? Y % 1 ! d ! / % 2 ! d ! - - - - - - - - - - - - ??: % 3 ! w s ! I D : % 4 ! w s ! ? ?eQ??: % 1 ! s ! ????: % 2 ! s ! [{ ?V: % 3 ! s ! ??: % 4 ! s ! R e t a i n C o r r e l a t i o n E v e n t s : % 5 ! s ! R e t a i n P I I : % 6 ! s ! R e t a i n G l o b a l E v e n t s : % 7 ! s ! sQT??*?. . . ?*?e??vQ????T{?o`??:N % 1 ! s ! 0 ck(W ubpenc?T. . . ck(WTv^?*? . . . ? ?? z?[{ ?V: Y*N?? z?/ec?? z?[{ ?V ? v^N(W?*N?? z?KNTO(u p r o v i d e r F i l t e r = Y e s /T(u???[{ ?V0/ec??? z?S?: ?? z?: M i c r o s o f t - W i n d o w s - R a s - N d i s W a n P a c k e t C a p t u r e R o u t i n g D o m a i n = < G U I D > :Nc???1u?/T(upencSUc?0 O(u " G e t - N e t C o m p a r t m e n t " R??(u?1u?0 ?a: dk?? z?[{ ?V/ecR>N?Bl?0 ?? ?n e t s h t r a c e s t a r t p r o v i d e r = M i c r o s o f t - W i n d o w s - R a s - N d i s W a n P a c k e t C a p t u r e p r o v i d e r F i l t e r = Y e s R o u t i n g D o m a i n = " { 1 1 1 1 1 1 1 1 - 1 1 1 1 - 1 1 1 1 - 1 1 1 1 - 1 1 1 1 1 1 1 1 1 0 0 1 } " ?? ?n e t s h t r a c e s t a r t p r o v i d e r = M i c r o s o f t - W i n d o w s - R a s - N d i s W a n P a c k e t C a p t u r e p r o v i d e r F i l t e r = Y e s R o u t i n g D o m a i n = " ( < G U I D 1 > , < G U I D 2 > ) " ?? ?n e t s h t r a c e s t a r t p r o v i d e r = M i c r o s o f t - W i n d o w s - R a s - N d i s W a n P a c k e t C a p t u r e p r o v i d e r F i l t e r = Y e s R o u t i n g D o m a i n = ! " ( < G U I D 1 > , < G U I D 2 > ) " V P N . U s e r N a m e = < U s e r N a m e / I n t e r f a c e N a m e > :Nc??(u7bb?? T?/T(upencSUc?0 ?a: dk?? z?[{ ?V N/ec?V0R>NbBl? ?? ?n e t s h t r a c e s t a r t p r o v i d e r = M i c r o s o f t - W i n d o w s - R a s - N d i s W a n P a c k e t C a p t u r e p r o v i d e r F i l t e r = Y e s V P N . U s e r N a m e = " U s e r X X X " ? ?? z?: M i c r o s o f t - W i n d o w s - T C P I P T C P . A n y P o r t = < ??> ?T C P . S o u r c e P o r t = < ??> ?T C P . D e s t i n a t i o n P o r t = < ??> AQ?(W?Rc???? N6e??*?0 ???(u? N[{ ?V??a?T0?? ?b?h??9SM? ?T C P . A n y P o r t \AQ? 6e??*?0 ?a: ???? z?[{ ?V/ecR>N0?V?Bl?0 ?? ?n e t s h t r a c e s t a r t p r o v i d e r = M i c r o s o f t - W i n d o w s - T C P I P p r o v i d e r F i l t e r = Y e s T C P . S o u r c e P o r t = 8 0 T C P . D e s t i n a t i o n P o r t = 1 2 3 4 ?? ?n e t s h t r a c e s t a r t p r o v i d e r = M i c r o s o f t - W i n d o w s - T C P I P p r o v i d e r F i l t e r = Y e s T C P . A n y P o r t = ( 8 0 , 4 4 3 ) ?? ?n e t s h t r a c e s t a r t p r o v i d e r = M i c r o s o f t - W i n d o w s - T C P I P p r o v i d e r F i l t e r = Y e s T C P . S o u r c e P o r t = ! ( 9 0 0 - 1 0 0 0 ) P r o c e s s I d = < ? z I D > :N???? z I D /T(u E T W ?*?0 ?a: dk?? z?[{ ?V/ec?V0R>N?Bl?0 ?? ?n e t s h t r a c e s t a r t p r o v i d e r = M i c r o s o f t - W i n d o w s - T C P I P p r o v i d e r F i l t e r = Y e s P r o c e s s I d = 9 8 7 ?? ?n e t s h t r a c e s t a r t p r o v i d e r = M i c r o s o f t - W i n d o w s - T C P I P p r o v i d e r F i l t e r = Y e s P r o c e s s I d = ( 1 , 5 , 8 , 9 ) ?? ?n e t s h t r a c e s t a r t p r o v i d e r = M i c r o s o f t - W i n d o w s - T C P I P p r o v i d e r F i l t e r = Y e s P r o c e s s I d = ! ( 1 0 0 - 2 0 0 ) I P v 4 . A d d r e s s = < I P v 4 0W@W> I P v 4 . S o u r c e A d d r e s s = < I P v 4 0W@W> I P v 4 . D e s t i n a t i o n A d d r e s s = < I P v 4 0W@W> :N??? I P v 4 0W@Wb0W@W/T(u E T W ?*?0 ???b?h0W@WN[{ ?V9SM? ? I P v 4 . A d d r e s s \AQ??*?0?? T?O(u?b?h [{ ?V0 ?a: ???? z?[{ ?V/ecR>N0?V?Bl?0 ?? ?n e t s h t r a c e s t a r t p r o v i d e r = M i c r o s o f t - W i n d o w s - T C P I P p r o v i d e r F i l t e r = Y e s I P v 4 . A d d r e s s = ( 2 . 0 . 0 . 0 - 3 . 0 . 0 . 0 ) ?? ?n e t s h t r a c e s t a r t p r o v i d e r = M i c r o s o f t - W i n d o w s - T C P I P p r o v i d e r F i l t e r = Y e s I P v 4 . S o u r c e A d d r e s s = ( 2 . 0 . 0 . 0 , 3 . 0 . 0 . 0 ) ?? ?n e t s h t r a c e s t a r t p r o v i d e r = M i c r o s o f t - W i n d o w s - T C P I P p r o v i d e r F i l t e r = Y e s I P v 4 . D e s t i n a t i o n A d d r e s s = ! ( 2 . 0 . 0 . 0 ) I P v 6 . A d d r e s s = < I P v 6 0W@W> I P v 6 . S o u r c e A d d r e s s = < I P v 6 0W@W> I P v 6 . D e s t i n a t i o n A d d r e s s = < I P v 6 0W@W> :N??? I P v 6 0W@W/T(u E T W ?*?0 ???b?h0W@WN[{ ?V9SM? ? I P v 6 . A d d r e s s \AQ??*?0?? T?O(u???h [{ ?V0 ?a: ???? z?[{ ?V/ecR>N0?V?Bl?0 ?? ?n e t s h t r a c e s t a r t p r o v i d e r = M i c r o s o f t - W i n d o w s - T C P I P p r o v i d e r F i l t e r = Y e s I P v 6 . A d d r e s s = ( 2 0 0 1 : : 1 - 2 0 0 1 : : f f f f ) ?? ?n e t s h t r a c e s t a r t p r o v i d e r = M i c r o s o f t - W i n d o w s - T C P I P p r o v i d e r F i l t e r = Y e s I P v 6 . S o u r c e A d d r e s s = ( 2 0 0 1 : : 1 - 2 0 0 1 : : f f f f ) ?? ?n e t s h t r a c e s t a r t p r o v i d e r = M i c r o s o f t - W i n d o w s - T C P I P p r o v i d e r F i l t e r = Y e s I P v 6 . D e s t i n a t i o n A d d r e s s = ! ( 2 0 0 1 : : f f f f ) R o u t i n g D o m a i n = < G U I D > :Nc???1u?/T(upencSUc?0 O(u " G e t - N e t C o m p a r t m e n t " R??(u?1u?0 ?: dk?? z?[{ ?V/ecR>N?Bl?0 ?? ?n e t s h t r a c e s t a r t p r o v i d e r = M i c r o s o f t - W i n d o w s - T C P I P p r o v i d e r F i l t e r = Y e s R o u t i n g D o m a i n = " { B 1 0 6 2 9 8 2 - 2 B 1 8 - 4 B 4 F - B 3 D 5 - A 7 8 D D B 9 C D D 4 9 } " ?? ?n e t s h t r a c e s t a r t p r o v i d e r = M i c r o s o f t - W i n d o w s - T C P I P p r o v i d e r F i l t e r = Y e s R o u t i n g D o m a i n = " ( < G U I D 1 > , < G U I D 2 > ) " ?? ?n e t s h t r a c e s t a r t p r o v i d e r = M i c r o s o f t - W i n d o w s - T C P I P p r o v i d e r F i l t e r = Y e s R o u t i n g D o m a i n = ! " ( < G U I D 1 > , < G U I D 2 > ) " \ ?a: d??S g?f ?&TR?? z?[{ ?V?(u?NUc?[{ ?V {|<O0O(u " n e t s h t r a c e s h o w C a p t u r e F i l t e r H e l p " ?? >f:yUc?[{ ?V?(u? ? N?? z?/ec?? z?[{ ?0??O(u? N }T?? w?? z?yr??.^?: M i c r o s o f t - W i n d o w s - T C P I P ' n e t s h t r a c e s h o w p r o v i d e r F i l t e r H e l p M i c r o s o f t - W i n d o w s - T C P I P ' M i c r o s o f t - W i n d o w s - R a s - N d i s W a n P a c k e t C a p t u r e ' n e t s h t r a c e s h o w p r o v i d e r F i l t e r H e l p M i c r o s o f t - W i n d o w s - R a s - N d i s W a n P a c k e t C a p t u r e ' PA vQ???V % 1 : ?*YQ??V % 1 : ?Lr???V % 1 : F D D I ??V % 1 : ????V % 1 : P P P ??V % 1 : S L I P ??V % 1 : ?S???V % 1 : ??@\?Q??V % 1 : *g???V % 1 : PA }T? ?? % 1 ! s ! ?<P % 2 ! s ! ?He0 }T? ?? % 1 ! s ! ?<P % 2 ! s ! ?He0 ?}T?? N*NbY*N?pe??b:\0 PA ?? % 1 ! s ! ?X[(W0 ?*?O??(W?L?-N0 ??/T??*?O?( ??= % 1 ! d ! ) 0 ??!j_?Bl^?? M a x S i z e ?pe0 S_MR? g?*?O?ck(W?L?0 ??\Pbk?*?O?( ??= 0 x % 1 ! x ! ) 0 % 1 ! s ! N/f N*N gHeb????? z?0 ????!j_ ? NAQ? O v e r w r i t e = y e s 0 ??/T??nUc?q?R z?( ??= 0 x % 1 ! x ! ) 0 $ % 1 ! s ! ?(u z???[Q?M?penc?0 ?sQ???(u z?v^??0 % 1 ! s ! N/f gHe?Hh0 ?Hh % 1 ! s ! ????0R?*?O?( ??= 0 x % 2 ! x ! ) 0 pencSUc??? z?????0R?*?O?( ??= 0 x % 1 ! x ! ) 0 ( @b?Bl??sQ?? z?( % 1 ! s ! ) ????0R?*?O?( ??= 0 x % 2 ! x ! ) 0 c??sQ.?[??? z? % 1 ! s ! ?He0 c???+R??? z? % 1 ! s ! ?He0 c???? % 1 ! s ! NX[(W0 l?c1Y%?( ??= 0 x % 1 ! x ! ) 0 % 1 ! s ! N/f gHe?\O&{0 % 1 ! s ! N/f gHe?V0 % 1 ! s ! N/f gHe??0 % 1 ! s ! N/f gHe{|?0 ?(W/T(uUc?TMbAQ?O(uUc?[{ ?V0 ??? t r a c e % 1 ! s ! .^? ?????.^??o`0 % 1 ! s ! /f@b ?Spe0 Q???1Y%?( ??= 0 x % 1 ! x ! ) 0 % 1 ! s ! ???h??eHe( ??= 0 x % 2 ! x ! ) 0 ( c? S a v e S e s s i o n T r a c e = n o ? NAQ? R e p o r t = y e s 0 % 1 ! w s ! /f?He?.^? z?{| ?b????? Ncknx0 < N?(u - ???.^? z?{|??> sQT?1Y%?( ??= 0 x % 1 ! x ! ) 0 ~b N0R;m? % 1 ! s ! 0 # }T? ?? % 1 ! s ! ?<P % 2 ! s ! ?He - ?{?:N G U I D 0 c???? % 1 ! s ! NX[(W0 /T(uUc???AQ? C a p t u r e T y p e _sQ0 dk C a p t u r e T y p e N?(u?dk???SO???0 ?? H y p e r - V ?r?TMb?/T(uZ?b?bc:gUc?0 ?*?Tv^1Y%?( ??= 0 x % 1 ! x ! ) 0 % 1 ! s ! N/f gHe??1u?0 PA f?T: ?nUc?q?R z???\Pbk( ??= 0 x % 1 ! x ! ) 0 f?T: ???X[O??o`( ??= 0 x % 1 ! x ! ) 0 f?T: ?JT ub1Y%?( ??= 0 x % 1 ! x ! ) 0 ( f?T: N T ?8h?U_hV ????(W?L?-N0 ???o`\ N??0R?*?e?0 f?T: ???o`????0R?*?e?( ??= 0 x % 1 ! x ! ) 0 f?T: ???"}.^? z?{|^\'`( ??= 0 x % 1 ! 0 8 X ! ) 0 f?T: N D F ?*?e? N?(u0 % f?T: 1u???pe??Y ?*gUc?????0 ??Q?O(u[{ ?V?\??pe? f?T: (W?hQ!j_-N N/ec ub?JT0 f?T: (W?hQ!j_-N N/ecpencSUc?0 PA sQ? /T(u3 % s y s t e m r o o t % \ p l a \ R e p o r t s \ R e p o r t . S y s t e m . N e t T r a c e . x m l 0 % s y s t e m r o o t % \ p l a \ R u l e s \ R u l e s . S y s t e m . N e t T r a c e . x m l /f &T2 % s y s t e m r o o t % \ s y s t e m 3 2 \ N e t T r a c e . P L A . D i a g n o s t i c s . x m l Q???A dkpenc6e?hV?(u?6e?,g0W??-N?Q??sQpenc0?6e??pencS?Q????*?0??h??N????Q??sQ?? g.^????lx??o`0 M i c r o s o f t W i n d o w s Q??*? M i c r o s o f t PA Q??o`6e?hV ??(u 0 0L 0 0l P P| ? ? ? ? ? a? ?? ? _? \Pbk ?? sQ.? ?? f?T ?o` ?? \ M i c r o s o f t - W i n d o w s - N e t w o r k i n g - C o r r e l a t i o n p M i c r o s o f t - W i n d o w s - N e t w o r k i n g - C o r r e l a t i o n / D i a g n o s t i c h??+R?>N?Z?b?? , ??? z?: % 1 N N?: % 2 , ??? z?: % 1 N N?: % 2 , ??? z?: % 1 N N?: % 2 ?4 V S _ V E R S I O N _ I N F O ?? @?% @?%? ? S t r i n g F i l e I n f o ? 0 8 0 4 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n : F i l e D e s c r i p t i o n Q??*?.^? z? r ) F i l e V e r s i o n 6 . 3 . 9 6 0 0 . 1 6 3 8 4 ( w i n b l u e _ r t m . 1 3 0 8 2 1 - 1 6 2 3 ) : I n t e r n a l N a m e n e t t r a c e . d l l ? . L e g a l C o p y r i g h t ? M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . J O r i g i n a l F i l e n a m e n e t t r a c e . d l l . m u i j % P r o d u c t N a m e M i c r o s o f t ? W i n d o w s ? O p e r a t i n g S y s t e m B P r o d u c t V e r s i o n 6 . 3 . 9 6 0 0 . 1 6 3 8 4 D V a r F i l e I n f o $ T r a n s l a t i o n ?<HTML> <HEAD> <META HTTP-EQUIV="content-type" CONTENT="text/html; charset=gb2312"> <STYLE> body{ font-family: 'Microsoft YaHei UI', 'Microsoft YaHei', ??, 'Segoe UI', Arial; color: black; margin-left: 5px; margin-right: 5px; margin-top: 5px;} td{ font-size: 75%; } th{ font-size: 70%; font-weight: bolder; border: 1px solid lightgrey; vertical-align: bottom; } hr{ border:1px solid lightgrey; height:1px; } ul{ margin-left: 16px; } li { font-size: 90%; } li li { font-size: 75%; } li li li { font-size: 90%; } .block{ border: solid gray 1px; width: 100%; } .b1{ background: white; } .b2{ background: whitesmoke; } </STYLE> <TITLE>????????</TITLE> </HEAD> <BODY> <TABLE class="block" style="table-layout:auto"> <TR><TH ID="LOCID_GENERAL_CONFIGURATION">????</TH></TR> <TR class="b1"><TD><A TARGET="_BLANK" HREF="osinfo.txt">OS Information</A></TD></TR> <TR class="b2"><TD><A TARGET="_BLANK" HREF="allcred.reg.txt">Credential Providers</A></TD></TR> </TABLE> <TABLE class="block" style="table-layout:auto"> <TR><TH ID="LOCID_NETWORK_CONFIGURATION">????</TH></TR> <TR class="b1"><TD><A TARGET="_BLANK" HREF="envinfo.txt">Environment Information</A></TD></TR> <TR class="b2"><TD><A TARGET="_BLANK" HREF="adapterinfo.txt">Adapter Information</A></TD></TR> <TR class="b1"><TD><A TARGET="_BLANK" HREF="dns.txt">DNS Information</A></TD></TR> <TR class="b2"><TD><A TARGET="_BLANK" HREF="neighbors.txt">Neighbor Information</A></TD></TR> </TABLE> <TABLE class="block" style="table-layout:auto"> <TR><TH ID="LOCID_WIRELESS_CONFIGURATION">????</TH></TR> <TR class="b1"><TD><A TARGET="_BLANK" HREF="WLANAutoConfigLog.evtx">WLAN Auto-Config Eventlog</A></TD></TR> </TABLE> <TABLE class="block" style="table-layout:auto"> <TR><TH ID="LOCID_WCN_CONFIGURATION">Windows ????</TH></TR> <TR class="b1"><TD><A TARGET="_BLANK" HREF="WCNInfo.txt">WCN Information</A></TD></TR> </TABLE> <TABLE class="block" style="table-layout:auto"> <TR><TH ID="LOCID_FIREWALL_CONFIGURATION">Windows ???</TH></TR> <TR class="b1"><TD><A TARGET="_BLANK" HREF="WindowsFirewallConfig.txt">Windows Firewall Configuration</A></TD></TR> <TR class="b2"><TD><A TARGET="_BLANK" HREF="WindowsFirewallEffectiveRules.txt">Windows Firewall Effective Rules</A></TD></TR> <TR class="b1"><TD><A TARGET="_BLANK" HREF="WindowsFirewallConsecLog.evtx">Connection Security Eventlog</A></TD></TR> <TR class="b2"><TD><A TARGET="_BLANK" HREF="WindowsFirewallConsecLogVerbose.evtx">Connection Security Eventlog (Verbose)</A></TD></TR> <TR class="b1"><TD><A TARGET="_BLANK" HREF="WindowsFirewallLog.evtx">Firewall Eventlog</A></TD></TR> <TR class="b2"><TD><A TARGET="_BLANK" HREF="WindowsFirewallLogVerbose.evtx">Firewall Eventlog (Verbose)</A></TD></TR> </TABLE> <TABLE class="block" style="table-layout:auto"> <TR><TH ID="LOCID_WINSOCK_CONFIGURATION">Winsock ??</TH></TR> <TR class="b1"><TD><A TARGET="_BLANK" HREF="WinsockCatalog.txt">Winsock LSP Catalog</A></TD></TR> </TABLE> <TABLE class="block" style="table-layout:auto"> <TR><TH ID="LOCID_FILESHARING_CONFIGURATION">????</TH></TR> <TR class="b1"><TD><A TARGET="_BLANK" HREF="filesharing.txt">File Sharing Configuration</A></TD></TR> </TABLE> <TABLE class="block" style="table-layout:auto"> <TR><TH ID="LOCID_REGISTRY">??????</TH></TR> <TR class="b1"><TD><A TARGET="_BLANK" HREF="AllCred.reg.txt">Credential Providers</A></TD></TR> <TR class="b2"><TD><A TARGET="_BLANK" HREF="AllCredFilter.reg.txt">Credential Provider Filters</A></TD></TR> <TR class="b1"><TD><A TARGET="_BLANK" HREF="APIPerm.reg.txt">API Permissions</A></TD></TR> <TR class="b2"><TD><A TARGET="_BLANK" HREF="HKLMWlanSvc.reg.txt">WlanSvc HKLM Dump</A></TD></TR> <TR class="b1"><TD><A TARGET="_BLANK" HREF="Notif.reg.txt">WinLogon Notification Subscribers</A></TD></TR> <TR class="b2"><TD><A TARGET="_BLANK" HREF="NetworkProfiles.reg.txt">Network Profiles</A></TD></TR> </TABLE> <TABLE class="block" style="table-layout:auto"> <TR><TH ID="LOCID_TRACES">????</TH></TR> <TR class="b1"><TD><A TARGET="_BLANK" HREF="report.etl">Primary Event Trace Log (ETL)</A></TD></TR> </TABLE> </BODY> </HTML> PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD
Ms-Dos/Windows
Unix
Write backup
jsp File Browser version 1.2 by
www.vonloesch.de