[sleuthkit-developers] [ sleuthkit-Bugs-3200998 ] hfind doesn't recognize hash db it created

[SourceForge.net <no...@so...>]

Bugs item #3200998, was opened at 2011-03-05 20:46
Message generated for change (Comment added) made by jlehr
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=477889&aid=3200998&group_id=55685

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Hash Tools
Group: None
>Status: Closed
>Resolution: Invalid
Priority: 5
Private: No
Submitted By: John Lehr (jlehr)
Assigned to: Nobody/Anonymous (nobody)
Summary: hfind doesn't recognize hash db it created

Initial Comment:
I downloaded the latests NSRL set, concatenated the NSRLFile.txt, and removed repeated hashes with uniq.  I created an nsrl-md5 db with 'hfind -i nsrl-mdr NSRLFile.txt' resulting in a NSRLFile.txt.uniq-md5.idx that contains two pipe delimited columns,  the first '00000000000000000000000000000000000000000|nsrl'

When I attempt a hash comparison with hfind or sorter, i get the following error: 'Cannot determine hash database type (hdb_open: Error determining DB type)'

Sleuthkit 3.2.1, Debian Testing

----------------------------------------------------------------------

>Comment By: John Lehr (jlehr)
Date: 2011-03-09 17:26

Message:
hfind improperly deployed by user.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=477889&aid=3200998&group_id=55685