我无法在Message Analyzer 1.3.1（Windows 10中捕获的ETL文件）中正确解析USB流量 [英] I can't get my USB traffic parsing right in Message Analyzer 1.3.1 (ETL file captured in Windows 10)

问题描述

当我打开在Windows 10中捕获的ETL文件时，PID / VID似乎不正确（与我在网络监视器3.4中读到的相比，我自己插入了设备，我知道什么是正确的VID / PID）。

我确实发现日志中有一些错误消息，我只在下面放了两个例子，

10/28/2015 3:29:17 PM错误C：\ Users \IBM_ADMIN \ AppData \ Local \ Mysoftoft \ MessageAnalyzer \OPNAndConfiguration\OpnForEtw \OpnForEtwProcess\TCPIPComponentExt.opn（173,45-173,62） ： 未声明的'EventTemplate_130'

10/28/2015 3:29:17 PM错误C：\ Users \IBM_ADMIN \ AppData \ Local \ Microsoft &\\MessageAnalyzer \OPNAndConfiguration \OpnForEtw \OpnForEtwProcess\TCPIPComponentExt.opn（197,50-197,67）：未声明的'EventTemplate_130'

可以你帮我理解我应该做些什么来克服它？

解决方案

顺便说一句，我的消息分析器确实适用于从其他操作系统捕获的ETL文件（win7,8）。

While I open my the ETL file captured in Windows 10, the PID/VID seems to be incorrect (compared to what I read in Network Monitor 3.4 and I plugged the devices myself, I know what's the right VID/PID).

I did discover there are some error messages in the log, and I only put two examples below,

10/28/2015 3:29:17 PM Error C:\Users\IBM_ADMIN\AppData\Local\Microsoft\MessageAnalyzer\OPNAndConfiguration\OpnForEtw\OpnForEtwProcess\TCPIPComponentExt.opn(173,45-173,62):  undeclared 'EventTemplate_130'
10/28/2015 3:29:17 PM Error C:\Users\IBM_ADMIN\AppData\Local\Microsoft\MessageAnalyzer\OPNAndConfiguration\OpnForEtw\OpnForEtwProcess\TCPIPComponentExt.opn(197,50-197,67):  undeclared 'EventTemplate_130'

Could you help me to understand what I should do to overcome it?

解决方案

By the way, my message analyzer did work for those ETL file captured from other operating systems (win7, 8).

这篇关于我无法在Message Analyzer 1.3.1（Windows 10中捕获的ETL文件）中正确解析USB流量的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！