[sleuthkit-users] "Proper" install method for TSK on Ubuntu
Brought to you by:
carrier
From: Tom Y. <to...@ya...> - 2018-11-17 06:25:36
|
Hello, I wanted to find out if anyone has or knows of a write up on the proper way to install TSK on an Ubuntu system. I'm not talking about using the packages (because they are behind in terms of releases), I mean building from the Source Release packages on the Github site. The reason I'm asking is there seems to be a step I'm missing. The last three version of Ubuntu I've run (all LTS) I've never been able to run srch_strings on it. It ALWAYS core dumps. Even if I run it against a text file. Then recently I was using F-Response (my Tactical license) to connect to a VM running on my Ubuntu Host (Windows Guest). I had a raw image of the guest mounted, but when I tried to do an fls on it (I was looking for a specific file), it core dumped. I'm at the point that I'm wonder if there's an installation step that I'm doing wrong, some library I might be missing, or something else. No matter which way I've installed it, apt for all the packages (even libewf, libaff, etc), or using apt for libewf, libaff, etc and then installing from the release source, or even a git pull from the Github site, I end up with the same result. I'm getting ready to build a new Linux Forensic laptop (Ubuntu 18.04) so I wanted to get the kinks out of my install process (and I'd rather not run the SIFT installer on top of it). Thanks..... Tom PGP Key ID - B32585D0 |