Re: [sleuthkit-users] Image file not found: -s

[Brian C. <ca...@sl...>]

Hi Matthew,

This was one of the bugs that I fixed last week.  It had to do with  
Autopsy using an old sorter flag (-i) that was later repurposed to  
specify image type, but I forgot to fix in Autopsy and it is only used  
with a certain set of options in Autopsy.  I'm going to try to get  
another release out this week with the new fixes.

thanks,
brian


On Feb 15, 2010, at 11:05 AM, Matthew Dettinger wrote:

> Brian,
>
> Please see below.  Thanks again for your help.
>
> Wed Feb 10 15:27:28 2010: LANG=C LC_ALL=C '/usr/bin/sorter' -h -m  
> 'C:/' -d '/var/lib/autopsy/name_removed/
> external_media/output/sorter-graphics-vol1/' -o 0 -i raw -f ntfs -i - 
> C '/usr/share/tsk/sorter/images.sort' -s -U  '/var/lib/autopsy/ 
> name_removed/external_media/images/MAXTOR.dd'
>
>
> On Fri, Feb 12, 2010 at 11:03 AM, Brian Carrier  
> <ca...@sl...> wrote:
> Hi Matthew,
>
> There are a couple of known problems with sorter and autopsy.  I  
> need to get a new release out with the fixes.  Can you send me the  
> line from the exec log that is used to run sorter? The exec log is  
> in the case/host/logs directory in the evidence locker directory.
>
> thanks!
>
> brian
>
>
>
>
> On Feb 10, 2010, at 4:56 PM, Matthew Dettinger wrote:
>
> Hello everyone.
>
> I am running autopsy/tsk in the following environment:
>
> Ubuntu 9.10 i386 Desktop
> sleuthkit 2.52
> autopsy 2.10
>
> I installed everything with 'sudo apt-get install autopsy'
>
> In the autopsy web environment I am trying to "Sort Files by Type"  
> with only the following options:
> 1 - Sort files into categories by type
> 2 - Save ONLY graphics images and make thumbnails
>
> Once I clicked "ok" I would get the following error message:
> Images configuration file not found "/usr/bin/../share/sorter/ 
> images.sort"
>
> I found the offending file Appsort.pm and modified it like so:
> #my $config = "$::TSKDIR/../share/sorter/images.sort";
> my $config = "/usr/share/tsk/sorter/images.sort";   <-- proper  
> location for the images.sort file
>
> Now when I try to do the "sort Files by Type" I get the following  
> error:
> Image file not found: -s
>
> any thoughts?  I've reproduced the this earlier on the newest  
> versions of tsk and autopsy.  I downgraded everything today thinking  
> it would fix the problem (including new install of ubuntu).
>
>
> Thanks for your time and consideration.
>
> mcd
> -- 
> ** *** ***** ******* ***********
> ------------------------------------------------------------------------------
> SOLARIS 10 is the OS for Data Centers - provides features such as  
> DTrace,
> Predictive Self Healing and Award Winning ZFS. Get Solaris 10 NOW
> http://p.sf.net/sfu/solaris-dev2dev_______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org
>
>
>
>
> -- 
> ** *** ***** ******* ***********
> ------------------------------------------------------------------------------
> SOLARIS 10 is the OS for Data Centers - provides features such as  
> DTrace,
> Predictive Self Healing and Award Winning ZFS. Get Solaris 10 NOW
> http://p.sf.net/sfu/solaris-dev2dev_______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org