[sleuthkit-users] Errors with Autopsy
Brought to you by:
carrier
|
From: DePriest, J. R. <jrd...@gm...> - 2006-03-15 22:48:07
|
I am trying to extract the strings from an image of an NTFS hard disk drive=
.
Periodically, autopsy gives this error:
Use of uninitialized value in concatenation (.) or string at
/sleuthkit/autopsy/lib//Caseman.pm line 3751.
It continues running, but spawns a new perl, dls, and srch_strings
process. Occasionally, it will start a new output file, too. It will
write data to both output files.
Looking at that line in Caseman.pm, I am not sure what I could change to fi=
x it.
The section of code looks like this:
3743=09 my $base_name =3D $Caseman::vol2sname{$vol};
3744=09
3745=09 if ($ascii =3D=3D 1) {
3746=09 my $fname_rel =3D "$::DATADIR/${base_name}-$ftype.asc";
3747=09 my $fname =3D "$::host_dir" . "$fname_rel";
3748=09
3749=09 if (-e "$fname") {
3750=09 my $i =3D 1;
3751=09 $i++ while (-e "$::host_dir"
3752=09 . "$::DATA_DIR/"
3753=09 . "${base_name}-$ftype-$i.asc");
3754=09
3755=09 $fname_rel =3D "$::DATADIR/${base_name}-$ftype-$i.asc";
3756=09 $fname =3D "$::host_dir" . "$fname_rel";
3757=09 }
3758=09
3759=09 print
3760=09"Extracting ASCII strings from <tt>$Caseman::vol2sname{$vol}</tt><br=
>\n";
3761=09
3762=09 Print::log_host_inv(
3763=09 "$Caseman::vol2sname{$vol}: Saving ASCII strings to
$fname_rel");
3764=09
3765=09 local *OUT;
-Jason
|