[sleuthkit-users] GC overhead limit exceeded on pst ingest.

[MATT P. <mat...@ad...>]

I'm performing a logical file ingest of a pst file.  I would like to search through the contents of this mail file for particular keywords.  Unfortunately this pst file is generating the error GC overhead limit exceeded.  An OST file from the same case is working fine.  Is there anything I can do to complete the ingest?  I found a few 9other users have experienced this error but no suggestions concerning what to do.

Forum Post.
http://forum.sleuthkit.org/viewtopic.php?f=6&t=2337&p=2478&hilit=gc+overhead#p2478

Version info.
Product Version: Autopsy 4.0.0 (RELEASE)
Sleuth Kit Version: 4.2.0
Netbeans RCP Build: 201411181905
Java: 1.8.0_66; Java HotSpot(TM) 64-Bit Server VM 25.66-b17
System: Windows 7 version 6.1 running on amd64; Cp1252; en_US (autopsy)

Here is what I believe to be the relevant log entry

2016-02-19 12:16:51.052 org.sleuthkit.autopsy.ingest.DataSourceIngestJob logIngestModuleErrors
SEVERE: Email Parser experienced an error analyzing LogicalFileSet1 (jobId=2)
java.lang.OutOfMemoryError: Java heap space:
                com.pff.LZFu.decode(LZFu.java:60)
                com.pff.PSTMessage.getRTFBody(PSTMessage.java:79)
                org.sleuthkit.autopsy.thunderbirdparser.PstParser.extractEmailMessage(PstParser.java:179)
                org.sleuthkit.autopsy.thunderbirdparser.PstParser.processFolder(PstParser.java:149)
                org.sleuthkit.autopsy.thunderbirdparser.PstParser.processFolder(PstParser.java:140)
                org.sleuthkit.autopsy.thunderbirdparser.PstParser.processFolder(PstParser.java:140)
                org.sleuthkit.autopsy.thunderbirdparser.PstParser.parse(PstParser.java:86)
                org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.processPst(ThunderbirdMboxFileIngestModule.java:142)
                org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.process(ThunderbirdMboxFileIngestModule.java:105)
                org.sleuthkit.autopsy.ingest.FileIngestPipeline$PipelineModule.process(FileIngestPipeline.java:222)
                org.sleuthkit.autopsy.ingest.FileIngestPipeline.process(FileIngestPipeline.java:122)
                org.sleuthkit.autopsy.ingest.DataSourceIngestJob.process(DataSourceIngestJob.java:703)
                org.sleuthkit.autopsy.ingest.FileIngestTask.execute(FileIngestTask.java:44)
                org.sleuthkit.autopsy.ingest.IngestManager$ExecuteIngestJobsTask.run(IngestManager.java:989)
                java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source)
                java.util.concurrent.FutureTask.run(Unknown Source)
                java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
                java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
                java.lang.Thread.run(Unknown Source)