Re: [sleuthkit-users] Errors with Autopsy
Brought to you by:
carrier
|
From: Paul B. <p.j...@br...> - 2006-03-15 22:54:21
|
3752 . "$::DATA_DIR/"
? In the other lines I see $DATADIR withouth the _
Is this a typo from your side? Or is this actually present in the file. (I don't have the files present now, so I can't check)
But all other elements in that statement are already used in lines 3746 and 3747, so I think it might lay with that.
Paul Bakker
DePriest, Jason R. wrote:
>I am trying to extract the strings from an image of an NTFS hard disk drive.
>
>Periodically, autopsy gives this error:
>Use of uninitialized value in concatenation (.) or string at
>/sleuthkit/autopsy/lib//Caseman.pm line 3751.
>
>It continues running, but spawns a new perl, dls, and srch_strings
>process. Occasionally, it will start a new output file, too. It will
>write data to both output files.
>
>Looking at that line in Caseman.pm, I am not sure what I could change to fix it.
>
>The section of code looks like this:
>3743 my $base_name = $Caseman::vol2sname{$vol};
>3744
>3745 if ($ascii == 1) {
>3746 my $fname_rel = "$::DATADIR/${base_name}-$ftype.asc";
>3747 my $fname = "$::host_dir" . "$fname_rel";
>3748
>3749 if (-e "$fname") {
>3750 my $i = 1;
>3751 $i++ while (-e "$::host_dir"
>3752 . "$::DATA_DIR/"
>3753 . "${base_name}-$ftype-$i.asc");
>3754
>3755 $fname_rel = "$::DATADIR/${base_name}-$ftype-$i.asc";
>3756 $fname = "$::host_dir" . "$fname_rel";
>3757 }
>3758
>3759 print
>3760 "Extracting ASCII strings from <tt>$Caseman::vol2sname{$vol}</tt><br>\n";
>3761
>3762 Print::log_host_inv(
>3763 "$Caseman::vol2sname{$vol}: Saving ASCII strings to
>$fname_rel");
>3764
>3765 local *OUT;
>
>-Jason
>
>
>-------------------------------------------------------
>This SF.Net email is sponsored by xPML, a groundbreaking scripting language
>that extends applications into web and mobile media. Attend the live webcast
>and join the prime developer group breaking into this new coding territory!
>http://sel.as-us.falkag.net/sel?cmd=k&kid0944&bid$1720&dat1642
>_______________________________________________
>sleuthkit-users mailing list
>https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
>http://www.sleuthkit.org
>
>
>
>
>
|