There should be a version of RRT which allows to load dumped event log into it instead of real time event log capturing.