[sleuthkit-users] sleuthkit1.73 install prob MAC OS X 10.3.6

[<sle...@dn...>]

First off, I'm using Sleuthkit/Autopsy browser to try to determine if someone deleted files off a iMac with Mac OS 8.5/8.6 installed--is this possible?

Installed on the Sleuthkit/Autopsy working hard drive is:
Mac OS X 10.3.6 (upgraded from 10.3.2)

I tried installing XCode Tools 1.1, but after install it said there were errors and to try re-installing, so I installed the gcc2.95.2.pkg, gcc3.1.pkg packages separately, successfully.  gcc3.3.pkg says, "gcc3.3 cannot be installed on this computer."

1 drive, 3 partitions:

/dev/disk0s11 on /Volumes/os8-9 (local) [ has 8.6, 9.2.2 installed ]
/dev/disk0s13 on /Volumes/osx (local, journaled)  [ has OS X 10.3.6 installed ]
/dev/disk0s15 on /Volumes/misc (local, journaled)

It looks like gcc, gcc2, and gcc3 are in "/Volumes/osx/usr/bin/"

Sleuthkit-1.73 is installed on:
	/Volumes/misc/sleuthkit-1.73

When I run "make" under "/Volumes/misc/sleuthkit-1.73" I get:

dnmacs-Computer:/Volumes/misc/sleuthkit-1.73 dnmac$ make
cd src/misc; make "CC=gcc" MAKELEVEL=
gcc -DDARWIN -DVER=\"1.73\" -O -Wall -g   -c -o mymalloc.o mymalloc.c
make: gcc: Command not found
make: *** [mymalloc.o] Error 127
make: *** [defs] Error 2
make: *** [no-perl] Error 2
dnmacs-Computer:/Volumes/misc/sleuthkit-1.73 dnmac$ 

When I run "make CC=cc" I get:  same, except "make: cc: Command not found"

When I run "make CC=gcc" I get: same, except "make: gcc: Command not found"

When I run "make CC=gcc2" I get:
( & make CC=/Volumes/osx/usr/bin/gcc2 )

dnmacs-Computer:/Volumes/misc/sleuthkit-1.73 dnmac$ make CC=gcc2
cd src/misc; make "CC=gcc2" MAKELEVEL=
gcc2 -DDARWIN -DVER=\"1.73\" -O -Wall -g   -c -o mymalloc.o mymalloc.c
mymalloc.c:49: header file 'stdlib.h' not found
mymalloc.c:50: header file 'unistd.h' not found
mymalloc.c:51: header file 'string.h' not found
cpp-precomp: warning: errors during smart preprocessing, retrying in basic mode
make: *** [mymalloc.o] Error 1
make: *** [defs] Error 2
make: *** [no-perl] Error 2
dnmacs-Computer:/Volumes/misc/sleuthkit-1.73 dnmac$ 

And when I run "make CC=gcc3" I get:
( & make CC=/Volumes/osx/usr/bin/gcc2 )

dnmacs-Computer:/Volumes/misc/sleuthkit-1.73 dnmac$ make CC=gcc3
cd src/misc; make "CC=gcc3" MAKELEVEL=
gcc3 -DDARWIN -DVER=\"1.73\" -O -Wall -g   -c -o mymalloc.o mymalloc.c
mymalloc.c:49: header file 'stdlib.h' not found
mymalloc.c:50: header file 'unistd.h' not found
mymalloc.c:51: header file 'string.h' not found
cpp-precomp: warning: errors during smart preprocessing, retrying in basic mode
make: *** [mymalloc.o] Error 1
make: *** [defs] Error 2
make: *** [no-perl] Error 2
dnmacs-Computer:/Volumes/misc/sleuthkit-1.73 dnmac$ 

I did start the Autopsy 2.03 install after this, but Autopsy install said:
Enter the directory where you installed it:
/Volumes/misc/sleuthkit-1.73      
The Sleuth Kit was not found (try again):

So I guess Sleuthkit didn't get installed.

Can anyone tell me what's going wrong?

After "make" works successfully, is there anything else I need to do in Sleuthkit, or can I go ahead and install Autopsy?

Thanks for your help,

Paul