Re: [sleuthkit-users] sleuthkit on Ubuntu

[Brian C. <ca...@sl...>]

The problem is that AFFLIB (for the AFF image format) requires zlib and=20
openssl, both of which do not seem to be included with Ubuntu by=20
default.  You will need to install those packages and libraries. Most=20
systems come with those libraries, but Ubuntu does not seem to (I went=20
through the same pain a couple of months ago setting a system up).

Also, someone else had issues compiling Kubuntu with the version of=20
AFFLIB that was included in tsk 2.04, so you should probably update the=20
AFFLIB with the latest version:

1.  Download version 1.6.26
http://www.afflib.org/downloads/afflib-1.6.26.tar.gz

2.  Untar it.

3.  Remove the src/afflib directory from TSK.

4.  Move the afflib-1.6.26 directory to src/afflib (be sure you name it=20
afflib and not afflib-1.6.26).

5. Compile TSK as normal.


Now that TSK requires external libraries, I may need to start using=20
autoconf so that these dependencies can be sorted out before compiling...=
.

brian




Sorrelle Michael W Ctr AFOSI/DOZI wrote:
> Hello,
>=20
> =20
>=20
> I just joined this list, so if my question is in a FAQ, my apologies;=20
> just point me to that.
>=20
> =20
>=20
> Has anyone tried to build/install sleuthkit on Ubuntu Linux?
>=20
> I have a completely fresh/clean installation of Ubuntu (+ development=20
> tools), but TSK won=92t build.  I get the following errors:
>=20
> =93In file included from aff_db.cpp:8:
>=20
>  afflib_i.h:53:18: error: zlib.h: No such file or directory
>=20
>  afflib_i.h:60:26: error: openssl/rand.h: No such file or directory
>=20
>  make: *** [aff_db.o] Error 1
>=20
>  make: *** [no-perl] Error 2=94
>=20
> =20
>=20
> FYI, perl IS installed: version 5.8.7
>=20
> =20
>=20
> Any hints/tips will be appreciated.
>=20
> =20
>=20
> *- -*
>=20
> *Mike Sorrelle*
>=20
> /Sr. Software Engineer/
>=20
> /FPMI Solutions, Inc./