Re: [sleuthkit-users] error running timeline in solaris 9 with s

[Brian C. <ca...@dm...>]

Oops.  The regular expression in Autopsy was not expecting to have multiple users for the same UID (the root/johnny string).  Replace base/autopsyfunc.pm.base with the one attached and re-make autopsy (you can keep the same config file though to save the questions).  

thanks,
brian


On 04 Jun 2003 12:08 PDT you wrote:

> Hi. I have seen issues on this list for mactimes with Redhat 8, but have not
> seen anyone
> write about any errors with the timeline function in Solaris 9.
> 
> The timeline will run, and some output will be generated, but most of the
> output looks like:
> Error parsing string: Mon Jul 9 2002 16:46:02 16020 .a. -/-rw-r--r--
> root/johnny bon 113477 /usr/sbin/ftpd
> 
> Any ideas on how I can fix this? I am running perl 5.6.1, which is shipped
> with solaris 9.
> Thanks.
> Cathy
> buc...@dc...