Re: [sleuthkit-announce] [sleuthkit-users] First Autopsy Linux ZIP

[Brian C. <ca...@sl...>]

Yea, the sleuthkit-java ".deb" file that we produced included the .so file
because the version that publicly exists as a Debian package did not have
everything we needed.   My concern with blindly overwriting it is that we
could impact other applications that use it.  The TSK tools are usually
static and do not rely on the library.  But, other tools are not.  I need
to refresh my memory on the ".so" versioning to know if it is OK for us to
overwrite a ".13" file.





On Thu, Mar 15, 2018 at 3:47 PM, Danilo Marques <da...@gm...> wrote:

> Hi Angus,
>
> I don't think so. The sleuthkit-java_4.6.0-1_amd64.deb package provides
> the lib /usr/lib/x86_64-linux-gnu/libtsk.so.13 and that one  conflicts
> with the package libtsk13 4.2.0-3. With regards to the TSK in Caine9, it
> remains working because of it was built from source, and it is installed in
> /usr/local tree.
>
> 2018-03-15 15:38 GMT-03:00 Angus Marshall <an...@n-...>:
>
>> Sounds like it could be similar to a minor problem I had when creating
>> CAINE-YE using Caine 9 and Autopsy 4.5 The solution was to make sure the
>> TSK_HOME variable pointed to the correct version of TSK for Autopsy 4.5 or
>> 2, depending on which one the user wanted to run.
>>
>> > On 15 Mar 2018, at 13:45, Danilo Marques <da...@gm...> wrote:
>> >
>> >  Hi to everyone,
>> >
>> > Dr. Nanni, I have tested it out in Caine 9 also, and I had the same
>> issue. The cause was a conflict with a libtsk13 package, so removing it
>> fixed and it was possible to install and to run Autopsy properly.
>> >
>> > In this way, I think that the problem isn't the
>> sleuthkit-java_4.6.0-1_amd64.deb package, but the "stock" installation
>> in Caine9, which has a package that conflicts with a lib provided by the
>> sleuthkit-java_4.6.0-1_amd64.deb.
>> >
>> > Regards,
>> >
>> > Danilo
>> >
>> >
>> >
>> >
>> > Em Qui, 15 de mar de 2018 05:13, Nanni Bassetti <dig...@gm...>
>> escreveu:
>> > It works in CAINE (Ubuntu 16.04) and it works on local disks!
>> >
>> > I installed following your procedure, but when I tried to install
>> sleuthkit-java_4.6.0-1_amd64.deb I got an error. If I try to launch
>> Autopsy sh ./autopsy I got an error, it cannot find the sluethkit-4.6.0.jar
>> fiel: ERROR: /usr/share/java/sleuthkit-4.6.0.jar not found, please
>> install the sleuthkit-java.deb file
>> > So I used Engrampa Archive Manager and I extract the file inside the
>> sleuthkit-java.deb into the matching directories of my system (e.g.
>> /usr/share/java, etc.) then when I ran ./autopsy it worked!
>> > For working on local disk, you can simply run sudo ./autopsy
>> > That's all.
>> > Finally the problem is only with the sleuthkit-java_4.6.0-1_amd64.deb
>> > PS: Autopsy for Linux seems faster than for Windows ;-)
>> >
>> > --
>> > Dott. Nanni Bassetti
>> > http://www.nannibassetti.com
>> > CAINE project manager - http://www.caine-live.net
>> >
>> > ------------------------------------------------------------
>> ------------------
>> > Check out the vibrant tech community on one of the world's most
>> > engaging tech sites, Slashdot.org! http://sdm.link/slashdot______
>> _________________________________________
>> > sleuthkit-users mailing list
>> > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
>> > http://www.sleuthkit.org
>> > ------------------------------------------------------------
>> ------------------
>> > Check out the vibrant tech community on one of the world's most
>> > engaging tech sites, Slashdot.org! http://sdm.link/slashdot______
>> _________________________________________
>> > sleuthkit-users mailing list
>> > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
>> > http://www.sleuthkit.org
>>
>>
>
>
> --
> ---
> Danilo Caio Marcucci Marques
> Computer Forensic Investigator - ICCE-DGPTC/PCERJ/Brazil
> Linux user #419162
> [image: MyFreeCopyright.com Registered & Protected]
> <http://www.myfreecopyright.com/registered_mcn/CEM82_BNX21_KQM8A>
>