Re: [sleuthkit-users] Charset encoder error when processing mbox files

[Nanni B. <dig...@gm...>]

Hi,
I did not test this, but I have to remind you that Caine 10 has Autopsy 4.9
onboard and not 4.9.1, so could it be a 4.9's issue?
Thanks

Il giorno lun 10 dic 2018 alle ore 06:20 <hyl...@is...> ha scritto:

> > Hi Joseph.
> >
> > This question might be better asked directly to Nanni as it sounds
> > like it may be Caine specific!  I just tested mbox parsing under
> > Debian testing w/Autopsy 4.9.1 and didn't have any issues with keyword
> > searches.
> >
> > While I don't have a copy of Caine to test with at the moment I wonder
> > if it's a manifestation of your systems locale.  If you fire up a
> > terminal emulator, can you send the output from 'locale' and 'locale
> > charmap'?  From MboxParser.java:111 in Autopsy it looks like if it
> > can't detect the character encoder that it'll throw that message but I
> > could be way off base here.
>
> Hi Derrick,
>
> Thank you very much for the quick reply.  Below is the output of 'locale':
>
> jhylkema@caine-vm:~$ locale
> LANG=en_US.UTF-8
> LANGUAGE=en_US
> LC_CTYPE="en_US.UTF-8"
> LC_NUMERIC=it_IT.UTF-8
> LC_TIME=it_IT.UTF-8
> LC_COLLATE="en_US.UTF-8"
> LC_MONETARY=it_IT.UTF-8
> LC_MESSAGES="en_US.UTF-8"
> LC_PAPER=it_IT.UTF-8
> LC_NAME=it_IT.UTF-8
> LC_ADDRESS=it_IT.UTF-8
> LC_TELEPHONE=it_IT.UTF-8
> LC_MEASUREMENT=it_IT.UTF-8
> LC_IDENTIFICATION=it_IT.UTF-8
> LC_ALL=
>
> And below is the output of 'locale charmap':
>
> jhylkema@caine-vm:~$ locale charmap
> UTF-8
>
> If I were a betting man, my money would be on the fact that LC_ALL isn't
> set.  Is that environment variable set in your Debian test distro?
>
> I will also email Nanni.
>
> Thank you.
>
> >
> > Derrick
> > On Sun, Dec 9, 2018 at 1:18 AM Joseph Hylkema <hyl...@is...>
> > wrote:
> >>
> >> Hi all,
> >>
> >> First post to the list.
> >>
> >> I am trying to use Autopsy to run some keyword searches on mbox files
> >> downloaded from gmail.  Unfortunately, autopsy returns an error:
> >> "Error while processing:  Could not find appropriate charset encoder."
> >> I am running Autopsy on Caine 10 in a KVM VM with 8GB RAM on a Lenovo
> >> P51 with a Core I7 processor.
> >>
> >> Any help would be appreciated.
> >>
> >> --
> >> "Far better it is to dare mighty things, to win glorious triumphs, even
> >> though checkered by failure, than to take rank with those poor spirits
> >> who neither enjoy much nor suffer much, because they live in the gray
> >> twilight that knows neither victory nor defeat."
> >>
> >> -- Theodore Roosevelt, "The Strenuous Life."
> >>
> >>
> >>
> >> _______________________________________________
> >> sleuthkit-users mailing list
> >> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> >> http://www.sleuthkit.org
> >
>
>
>
>
> _______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org
>


-- 
Dott. Nanni Bassetti
http://www.nannibassetti.com
CAINE project manager - http://www.caine-live.net