Bugs item #3200998, was opened at 2011-03-05 20:46
Message generated for change (Comment added) made by jlehr
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=477889&aid=3200998&group_id=55685
Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Hash Tools
Group: None
>Status: Closed
>Resolution: Invalid
Priority: 5
Private: No
Submitted By: John Lehr (jlehr)
Assigned to: Nobody/Anonymous (nobody)
Summary: hfind doesn't recognize hash db it created
Initial Comment:
I downloaded the latests NSRL set, concatenated the NSRLFile.txt, and removed repeated hashes with uniq. I created an nsrl-md5 db with 'hfind -i nsrl-mdr NSRLFile.txt' resulting in a NSRLFile.txt.uniq-md5.idx that contains two pipe delimited columns, the first '00000000000000000000000000000000000000000|nsrl'
When I attempt a hash comparison with hfind or sorter, i get the following error: 'Cannot determine hash database type (hdb_open: Error determining DB type)'
Sleuthkit 3.2.1, Debian Testing
----------------------------------------------------------------------
>Comment By: John Lehr (jlehr)
Date: 2011-03-09 17:26
Message:
hfind improperly deployed by user.
----------------------------------------------------------------------
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=477889&aid=3200998&group_id=55685
|
