Re: [sleuthkit-users] sleuthkit1.73 install prob MAC OS X 10.3.6

[Brian C. <ca...@sl...>]

On Jan 7, 2005, at 5:38 PM, sle...@dn... wrote:

>
> First off, I'm using Sleuthkit/Autopsy browser to try to determine if 
> someone deleted files off a iMac with Mac OS 8.5/8.6 installed--is 
> this possible?

TSK/Autopsy does not support the HFS+ file system, so they will 
probably not do what you need.

> Installed on the Sleuthkit/Autopsy working hard drive is:
> Mac OS X 10.3.6 (upgraded from 10.3.2)
>
> I tried installing XCode Tools 1.1, but after install it said there 
> were errors and to try re-installing, so I installed the 
> gcc2.95.2.pkg, gcc3.1.pkg packages separately, successfully.  
> gcc3.3.pkg says, "gcc3.3 cannot be installed on this computer."

I think you should try to get XCode working if you want to compile it.  
I have never installed gcc directly, but according to Seth it may not 
include the header files that you need. So, I would try to get XCode 
working, but it may not even be what you need if you need to analyze 
HFS.

brian