Re: [sleuthkit-users] Questions on new version

[Brian C. <ca...@sl...>]

Eagle Investigative Services <in...@ea...> said:

> I've installed the 1.71 version of Autopsy and 1.61 version of
Sleuthkit on
> my SUSe Linux
> machine and I have a couple of questions
> 
> 1. When I run ./autopsy, I get the URL as  usual, and I paste
> it into my browser and the program runs. The bitmap image
> however, shows 1.70, not 1.71. Is this normal?

Yea, the graphic is for the major version which is 1.7X.  If you click
on the image, then it brings you to the 'about' section which has the
exact version.


> 2. What is the purpose of the symbolic link in the sleuthkit
installation?
> I created a directory called sleuthkit, and created the symbolic
link, which
> appears in that directory just fine. However, I'm not sure why I
would link
> a new directory
> to an existing directory? Can anyone shed some light?

You don't have to create the generic directory and the symbolic link.
 The installation will make a directory such as autopsy-1.71.  The
goal of the symbolic link is to just reference 'autopsy' and skip the
version number.  For example, /usr/local/autopsy links to
/usr/local/autopsy-1.71.  

The generic directory is more useful for the sleuth kit than autopsy.
 Then, you can have all the binaries always in your path and you can
install new versions of the slueth kit with out reconfiguring an older
version of Autopsy.  

brian