Thread: [sleuthkit-users] Image file not found: -s
Brought to you by:
carrier
Menu
▾
▴
sleuthkit-users
|
From: Matthew D. <mc...@gm...> - 2010-02-10 21:56:41
|
Hello everyone. I am running autopsy/tsk in the following environment: Ubuntu 9.10 i386 Desktop sleuthkit 2.52 autopsy 2.10 I installed everything with 'sudo apt-get install autopsy' In the autopsy web environment I am trying to "Sort Files by Type" with only the following options: 1 - Sort files into categories by type 2 - Save ONLY graphics images and make thumbnails Once I clicked "ok" I would get the following error message: Images configuration file not found "/usr/bin/../share/sorter/images.sort" I found the offending file Appsort.pm and modified it like so: #my $config = "$::TSKDIR/../share/sorter/images.sort"; my $config = "/usr/share/tsk/sorter/images.sort"; <-- proper location for the images.sort file Now when I try to do the "sort Files by Type" I get the following error: Image file not found: -s any thoughts? I've reproduced the this earlier on the newest versions of tsk and autopsy. I downgraded everything today thinking it would fix the problem (including new install of ubuntu). Thanks for your time and consideration. mcd -- ** *** ***** ******* *********** |
|
From: Brian C. <ca...@sl...> - 2010-02-12 17:03:20
|
Hi Matthew, There are a couple of known problems with sorter and autopsy. I need to get a new release out with the fixes. Can you send me the line from the exec log that is used to run sorter? The exec log is in the case/host/logs directory in the evidence locker directory. thanks! brian On Feb 10, 2010, at 4:56 PM, Matthew Dettinger wrote: > Hello everyone. > > I am running autopsy/tsk in the following environment: > > Ubuntu 9.10 i386 Desktop > sleuthkit 2.52 > autopsy 2.10 > > I installed everything with 'sudo apt-get install autopsy' > > In the autopsy web environment I am trying to "Sort Files by Type" > with only the following options: > 1 - Sort files into categories by type > 2 - Save ONLY graphics images and make thumbnails > > Once I clicked "ok" I would get the following error message: > Images configuration file not found "/usr/bin/../share/sorter/ > images.sort" > > I found the offending file Appsort.pm and modified it like so: > #my $config = "$::TSKDIR/../share/sorter/images.sort"; > my $config = "/usr/share/tsk/sorter/images.sort"; <-- proper > location for the images.sort file > > Now when I try to do the "sort Files by Type" I get the following > error: > Image file not found: -s > > any thoughts? I've reproduced the this earlier on the newest > versions of tsk and autopsy. I downgraded everything today thinking > it would fix the problem (including new install of ubuntu). > > > Thanks for your time and consideration. > > mcd > -- > ** *** ***** ******* *********** > ------------------------------------------------------------------------------ > SOLARIS 10 is the OS for Data Centers - provides features such as > DTrace, > Predictive Self Healing and Award Winning ZFS. Get Solaris 10 NOW > http://p.sf.net/sfu/solaris-dev2dev_______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org |
|
From: Matthew D. <mc...@gm...> - 2010-02-15 16:05:30
|
Brian, Please see below. Thanks again for your help. Wed Feb 10 15:27:28 2010: LANG=C LC_ALL=C '/usr/bin/sorter' -h -m 'C:/' -d '/var/lib/autopsy/name_removed/ external_media/output/sorter-graphics-vol1/' -o 0 -i raw -f ntfs -i -C '/usr/share/tsk/sorter/images.sort' -s -U '/var/lib/autopsy/name_removed/external_media/images/MAXTOR.dd' On Fri, Feb 12, 2010 at 11:03 AM, Brian Carrier <ca...@sl...>wrote: > Hi Matthew, > > There are a couple of known problems with sorter and autopsy. I need to > get a new release out with the fixes. Can you send me the line from the > exec log that is used to run sorter? The exec log is in the case/host/logs > directory in the evidence locker directory. > > thanks! > > brian > > > > > On Feb 10, 2010, at 4:56 PM, Matthew Dettinger wrote: > > Hello everyone. >> >> I am running autopsy/tsk in the following environment: >> >> Ubuntu 9.10 i386 Desktop >> sleuthkit 2.52 >> autopsy 2.10 >> >> I installed everything with 'sudo apt-get install autopsy' >> >> In the autopsy web environment I am trying to "Sort Files by Type" with >> only the following options: >> 1 - Sort files into categories by type >> 2 - Save ONLY graphics images and make thumbnails >> >> Once I clicked "ok" I would get the following error message: >> Images configuration file not found "/usr/bin/../share/sorter/images.sort" >> >> I found the offending file Appsort.pm and modified it like so: >> #my $config = "$::TSKDIR/../share/sorter/images.sort"; >> my $config = "/usr/share/tsk/sorter/images.sort"; <-- proper location >> for the images.sort file >> >> Now when I try to do the "sort Files by Type" I get the following error: >> Image file not found: -s >> >> any thoughts? I've reproduced the this earlier on the newest versions of >> tsk and autopsy. I downgraded everything today thinking it would fix the >> problem (including new install of ubuntu). >> >> >> Thanks for your time and consideration. >> >> mcd >> -- >> ** *** ***** ******* *********** >> >> ------------------------------------------------------------------------------ >> SOLARIS 10 is the OS for Data Centers - provides features such as DTrace, >> Predictive Self Healing and Award Winning ZFS. Get Solaris 10 NOW >> >> http://p.sf.net/sfu/solaris-dev2dev_______________________________________________ >> sleuthkit-users mailing list >> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users >> http://www.sleuthkit.org >> > > -- ** *** ***** ******* *********** |
|
From: Brian C. <ca...@sl...> - 2010-02-15 21:18:46
|
Hi Matthew, This was one of the bugs that I fixed last week. It had to do with Autopsy using an old sorter flag (-i) that was later repurposed to specify image type, but I forgot to fix in Autopsy and it is only used with a certain set of options in Autopsy. I'm going to try to get another release out this week with the new fixes. thanks, brian On Feb 15, 2010, at 11:05 AM, Matthew Dettinger wrote: > Brian, > > Please see below. Thanks again for your help. > > Wed Feb 10 15:27:28 2010: LANG=C LC_ALL=C '/usr/bin/sorter' -h -m > 'C:/' -d '/var/lib/autopsy/name_removed/ > external_media/output/sorter-graphics-vol1/' -o 0 -i raw -f ntfs -i - > C '/usr/share/tsk/sorter/images.sort' -s -U '/var/lib/autopsy/ > name_removed/external_media/images/MAXTOR.dd' > > > On Fri, Feb 12, 2010 at 11:03 AM, Brian Carrier > <ca...@sl...> wrote: > Hi Matthew, > > There are a couple of known problems with sorter and autopsy. I > need to get a new release out with the fixes. Can you send me the > line from the exec log that is used to run sorter? The exec log is > in the case/host/logs directory in the evidence locker directory. > > thanks! > > brian > > > > > On Feb 10, 2010, at 4:56 PM, Matthew Dettinger wrote: > > Hello everyone. > > I am running autopsy/tsk in the following environment: > > Ubuntu 9.10 i386 Desktop > sleuthkit 2.52 > autopsy 2.10 > > I installed everything with 'sudo apt-get install autopsy' > > In the autopsy web environment I am trying to "Sort Files by Type" > with only the following options: > 1 - Sort files into categories by type > 2 - Save ONLY graphics images and make thumbnails > > Once I clicked "ok" I would get the following error message: > Images configuration file not found "/usr/bin/../share/sorter/ > images.sort" > > I found the offending file Appsort.pm and modified it like so: > #my $config = "$::TSKDIR/../share/sorter/images.sort"; > my $config = "/usr/share/tsk/sorter/images.sort"; <-- proper > location for the images.sort file > > Now when I try to do the "sort Files by Type" I get the following > error: > Image file not found: -s > > any thoughts? I've reproduced the this earlier on the newest > versions of tsk and autopsy. I downgraded everything today thinking > it would fix the problem (including new install of ubuntu). > > > Thanks for your time and consideration. > > mcd > -- > ** *** ***** ******* *********** > ------------------------------------------------------------------------------ > SOLARIS 10 is the OS for Data Centers - provides features such as > DTrace, > Predictive Self Healing and Award Winning ZFS. Get Solaris 10 NOW > http://p.sf.net/sfu/solaris-dev2dev_______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org > > > > > -- > ** *** ***** ******* *********** > ------------------------------------------------------------------------------ > SOLARIS 10 is the OS for Data Centers - provides features such as > DTrace, > Predictive Self Healing and Award Winning ZFS. Get Solaris 10 NOW > http://p.sf.net/sfu/solaris-dev2dev_______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org |
|
From: bdmeyer <bd...@ci...> - 2010-05-04 14:13:57
|
Hellow Brian, Is this fix available for install yet? I am using the SIFT 2.0 workstation (Not the VM, but iso isntalled on a laptop) Will this require me to remove Autopsy and reinstall, or how would I get this fix incorporated onto my Sift? Thanks for the great work. <quotel>Hi Matthew, This was one of the bugs that I fixed last week. It had to do with Autopsy using an old sorter flag (-i) that was later repurposed to specify image type, but I forgot to fix in Autopsy and it is only used with a certain set of options in Autopsy. I'm going to try to get another release out this week with the new fixes. thanks, brian -- View this message in context: http://old.nabble.com/Image-file-not-found%3A--s-tp27538826p28447738.html Sent from the sleuthkit-users mailing list archive at Nabble.com. |
|
From: Brian C. <ca...@sl...> - 2010-05-17 02:44:04
|
Hello, Yes, it was fixed two versions of Autopsy ago. Not sure about SIFT. brian On May 4, 2010, at 10:13 AM, bdmeyer wrote: > > Hellow Brian, > Is this fix available for install yet? I am using the SIFT 2.0 workstation > (Not the VM, but iso isntalled on a laptop) > > Will this require me to remove Autopsy and reinstall, or how would I get > this fix incorporated onto my Sift? > > Thanks for the great work. > > > <quotel>Hi Matthew, > > This was one of the bugs that I fixed last week. It had to do with > Autopsy using an old sorter flag (-i) that was later repurposed to > specify image type, but I forgot to fix in Autopsy and it is only used > with a certain set of options in Autopsy. I'm going to try to get > another release out this week with the new fixes. > > thanks, > brian > > -- > View this message in context: http://old.nabble.com/Image-file-not-found%3A--s-tp27538826p28447738.html > Sent from the sleuthkit-users mailing list archive at Nabble.com. > > > ------------------------------------------------------------------------------ > _______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org |
×
Want the latest updates on software, tech news, and AI?
Get latest updates about software, tech news, and AI from SourceForge directly in your inbox once a month.
Thanks for helping keep SourceForge clean.
X