q000057

NetXray says it can't read the .enc files generated by the product.

This article applies to: BlackICE Defender.

SUMMARY

NetXray expects an "end-of-file" terminator or it refuses to read the tracefiles. This will be fixed in the future, but in the meanwhile we've created a small program that will generate the necessary termination that will allow files to be read by NetXray.

DETAILS

NetXray is a popular product to read tracefiles, like those generated for evidence by our products. A demo version of this product can be obtained at:

http://download.mcafee.com/products/evaluation/sniffer_basic/english/winnt/intel/nx30e.zip

However, the demo version is only able to read the first 5 frames from the file.

Both the demo version and the full version have the problem that they expect an "end-of-file" terminator. The original version of our product does not generate this terminator. We have developed a small program that will check files and append this terminator if necessary. This program is xrayfix.exe.

To use this program, run it from the command-line like so:

 
c:\Program Files\Network ICE\BlackICE>xrayfix *.enc 

It will fix all files needing it. Note that this program will still not repair files that are 0-size or corrupted.

 
Keywords: NetXray 
Version:  1.8.5.5 
Fixed:     
Modified: 1999-10-20