Thread: [sleuthkit-users] Building SleuthKit from source on Windows with VC++

Brought to you by: carrier

sleuthkit-users

[sleuthkit-users] Building SleuthKit from source on Windows with VC++

From: Edward D. <eld...@tr...> - 2016-06-24 19:31:42

In the instructions for building Sleuthkit from source on Windows with 
the VC++ compiler it says in the win32/BUILDING.txt file:

"1) Download libewf-20130128 (or later).  The official releases are from:
     http://sourceforge.net/projects/libewf/"

There is no longer a libewf-20130128 release ( or any other libewf 
release ) at Sourceforge and the only releases offered after that from 
the libewf Github site are in Linux line ending format, come after the  
libewf-20130128 release, and are incompatible with the current Sleuthkit 
source, whether 'master' or 'develop' branch. Furthermore the libewf 
Github source is also incompatible with SleuthKit, as explained at 
http://forum.sleuthkit.org/viewtopic.php?f=9&t=2740.

How can I get the libewf-20130128 release for Windows so I can build 
Sleuthkit from source using VC++ ?

Re: [sleuthkit-users] Building SleuthKit from source on Windows with VC++

From: Brian C. <ca...@sl...> - 2016-07-09 03:57:00

We use the 64-bit version on github, but I have an email from Joachim a while back saying to go to https://github.com/libyal/libewf/wiki for the older stable releases, which eventually directs you to this google drive: https://53efc0a7187d0baa489ee347026b8278fe4020f6.googledrive.com/host/0B3fBvzttpiiSMTdoaVExWWNsRjg/


> On Jun 24, 2016, at 3:31 PM, Edward Diener <eld...@tr...> wrote:
> 
> In the instructions for building Sleuthkit from source on Windows with 
> the VC++ compiler it says in the win32/BUILDING.txt file:
> 
> "1) Download libewf-20130128 (or later).  The official releases are from:
>     http://sourceforge.net/projects/libewf/"
> 
> There is no longer a libewf-20130128 release ( or any other libewf 
> release ) at Sourceforge and the only releases offered after that from 
> the libewf Github site are in Linux line ending format, come after the  
> libewf-20130128 release, and are incompatible with the current Sleuthkit 
> source, whether 'master' or 'develop' branch. Furthermore the libewf 
> Github source is also incompatible with SleuthKit, as explained at 
> http://forum.sleuthkit.org/viewtopic.php?f=9&t=2740.
> 
> How can I get the libewf-20130128 release for Windows so I can build 
> Sleuthkit from source using VC++ ?
> 
> 
> 
> ------------------------------------------------------------------------------
> Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
> Francisco, CA to explore cutting-edge tech and listen to tech luminaries
> present their vision of the future. This family event has something for
> everyone, including kids. Get more information and register today.
> http://sdm.link/attshape
> _______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org

Re: [sleuthkit-users] Building SleuthKit from source on Windows with VC++

From: Edward D. <eld...@tr...> - 2016-07-09 04:28:38

On 7/8/2016 11:56 PM, Brian Carrier wrote:
> We use the 64-bit version on github, but I have an email from Joachim a while back saying to go to https://github.com/libyal/libewf/wiki for the older stable releases, which eventually directs you to this google drive: https://53efc0a7187d0baa489ee347026b8278fe4020f6.googledrive.com/host/0B3fBvzttpiiSMTdoaVExWWNsRjg/
None of those versions are compatible with the latest TSK, whether 
'develop' or 'master' branch. For the reason why please see 
http://forum.sleuthkit.org/viewtopic.php?f=9&t=2740&sid=cc46e2042f4e0696d6e7c22ed2efc90a. 
I have been using the 64-bit version on Sleuthkit's github configured 
for both 32-bit and 64-bit configurations, but I believe this may be a 
very old libewf version.

Eddie Diener
>
>
>> On Jun 24, 2016, at 3:31 PM, Edward Diener <eld...@tr...> wrote:
>>
>> In the instructions for building Sleuthkit from source on Windows with
>> the VC++ compiler it says in the win32/BUILDING.txt file:
>>
>> "1) Download libewf-20130128 (or later).  The official releases are from:
>>      http://sourceforge.net/projects/libewf/"
>>
>> There is no longer a libewf-20130128 release ( or any other libewf
>> release ) at Sourceforge and the only releases offered after that from
>> the libewf Github site are in Linux line ending format, come after the
>> libewf-20130128 release, and are incompatible with the current Sleuthkit
>> source, whether 'master' or 'develop' branch. Furthermore the libewf
>> Github source is also incompatible with SleuthKit, as explained at
>> http://forum.sleuthkit.org/viewtopic.php?f=9&t=2740.
>>
>> How can I get the libewf-20130128 release for Windows so I can build
>> Sleuthkit from source using VC++ ?
>>
>>
>>
>> ------------------------------------------------------------------------------
>> Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
>> Francisco, CA to explore cutting-edge tech and listen to tech luminaries
>> present their vision of the future. This family event has something for
>> everyone, including kids. Get more information and register today.
>> http://sdm.link/attshape
>> _______________________________________________
>> sleuthkit-users mailing list
>> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
>> http://www.sleuthkit.org

Re: [sleuthkit-users] Building SleuthKit from source on Windows with VC++

From: Brian C. <ca...@sl...> - 2016-07-09 14:08:35

Has anyone tried libewf-20140608.tar.gz to see if it works without TSK code changes?   

We tried the latest experimental a while back, but ran into some problems with that and backed off. 


> On Jul 9, 2016, at 12:28 AM, Edward Diener <eld...@tr...> wrote:
> 
> On 7/8/2016 11:56 PM, Brian Carrier wrote:
>> We use the 64-bit version on github, but I have an email from Joachim a while back saying to go to https://github.com/libyal/libewf/wiki for the older stable releases, which eventually directs you to this google drive: https://53efc0a7187d0baa489ee347026b8278fe4020f6.googledrive.com/host/0B3fBvzttpiiSMTdoaVExWWNsRjg/
> None of those versions are compatible with the latest TSK, whether 
> 'develop' or 'master' branch. For the reason why please see 
> http://forum.sleuthkit.org/viewtopic.php?f=9&t=2740&sid=cc46e2042f4e0696d6e7c22ed2efc90a. 
> I have been using the 64-bit version on Sleuthkit's github configured 
> for both 32-bit and 64-bit configurations, but I believe this may be a 
> very old libewf version.
> 
> Eddie Diener
>> 
>> 
>>> On Jun 24, 2016, at 3:31 PM, Edward Diener <eld...@tr...> wrote:
>>> 
>>> In the instructions for building Sleuthkit from source on Windows with
>>> the VC++ compiler it says in the win32/BUILDING.txt file:
>>> 
>>> "1) Download libewf-20130128 (or later).  The official releases are from:
>>>     http://sourceforge.net/projects/libewf/"
>>> 
>>> There is no longer a libewf-20130128 release ( or any other libewf
>>> release ) at Sourceforge and the only releases offered after that from
>>> the libewf Github site are in Linux line ending format, come after the
>>> libewf-20130128 release, and are incompatible with the current Sleuthkit
>>> source, whether 'master' or 'develop' branch. Furthermore the libewf
>>> Github source is also incompatible with SleuthKit, as explained at
>>> http://forum.sleuthkit.org/viewtopic.php?f=9&t=2740.
>>> 
>>> How can I get the libewf-20130128 release for Windows so I can build
>>> Sleuthkit from source using VC++ ?
>>> 
>>> 
>>> 
>>> ------------------------------------------------------------------------------
>>> Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
>>> Francisco, CA to explore cutting-edge tech and listen to tech luminaries
>>> present their vision of the future. This family event has something for
>>> everyone, including kids. Get more information and register today.
>>> http://sdm.link/attshape
>>> _______________________________________________
>>> sleuthkit-users mailing list
>>> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
>>> http://www.sleuthkit.org
> 
> 
> 
> ------------------------------------------------------------------------------
> Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
> Francisco, CA to explore cutting-edge tech and listen to tech luminaries
> present their vision of the future. This family event has something for
> everyone, including kids. Get more information and register today.
> http://sdm.link/attshape
> _______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org

Re: [sleuthkit-users] Building SleuthKit from source on Windows with VC++

From: Kam W. <kam...@gm...> - 2016-07-09 14:47:18

Yes - I have been using 20140608 for some time with both 4.2.0 and the TSK
GitHub master. Configuring with --enable-v1-api and compiling on stock
Ubuntu 14.04 and 16.04 64-bit boxes. No code changes, compiles clean and
everything seems to work.

Kam

On Sat, Jul 9, 2016 at 10:08 AM, Brian Carrier <ca...@sl...>
wrote:

> Has anyone tried libewf-20140608.tar.gz to see if it works without TSK
> code changes?
>
> We tried the latest experimental a while back, but ran into some problems
> with that and backed off.
>
>
> > On Jul 9, 2016, at 12:28 AM, Edward Diener <
> eld...@tr...> wrote:
> >
> > On 7/8/2016 11:56 PM, Brian Carrier wrote:
> >> We use the 64-bit version on github, but I have an email from Joachim a
> while back saying to go to https://github.com/libyal/libewf/wiki for the
> older stable releases, which eventually directs you to this google drive:
> https://53efc0a7187d0baa489ee347026b8278fe4020f6.googledrive.com/host/0B3fBvzttpiiSMTdoaVExWWNsRjg/
> > None of those versions are compatible with the latest TSK, whether
> > 'develop' or 'master' branch. For the reason why please see
> >
> http://forum.sleuthkit.org/viewtopic.php?f=9&t=2740&sid=cc46e2042f4e0696d6e7c22ed2efc90a
> .
> > I have been using the 64-bit version on Sleuthkit's github configured
> > for both 32-bit and 64-bit configurations, but I believe this may be a
> > very old libewf version.
> >
> > Eddie Diener
> >>
> >>
> >>> On Jun 24, 2016, at 3:31 PM, Edward Diener <
> eld...@tr...> wrote:
> >>>
> >>> In the instructions for building Sleuthkit from source on Windows with
> >>> the VC++ compiler it says in the win32/BUILDING.txt file:
> >>>
> >>> "1) Download libewf-20130128 (or later).  The official releases are
> from:
> >>>     http://sourceforge.net/projects/libewf/"
> >>>
> >>> There is no longer a libewf-20130128 release ( or any other libewf
> >>> release ) at Sourceforge and the only releases offered after that from
> >>> the libewf Github site are in Linux line ending format, come after the
> >>> libewf-20130128 release, and are incompatible with the current
> Sleuthkit
> >>> source, whether 'master' or 'develop' branch. Furthermore the libewf
> >>> Github source is also incompatible with SleuthKit, as explained at
> >>> http://forum.sleuthkit.org/viewtopic.php?f=9&t=2740.
> >>>
> >>> How can I get the libewf-20130128 release for Windows so I can build
> >>> Sleuthkit from source using VC++ ?
> >>>
> >>>
> >>>
> >>>
> ------------------------------------------------------------------------------
> >>> Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
> >>> Francisco, CA to explore cutting-edge tech and listen to tech
> luminaries
> >>> present their vision of the future. This family event has something for
> >>> everyone, including kids. Get more information and register today.
> >>> http://sdm.link/attshape
> >>> _______________________________________________
> >>> sleuthkit-users mailing list
> >>> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> >>> http://www.sleuthkit.org
> >
> >
> >
> >
> ------------------------------------------------------------------------------
> > Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
> > Francisco, CA to explore cutting-edge tech and listen to tech luminaries
> > present their vision of the future. This family event has something for
> > everyone, including kids. Get more information and register today.
> > http://sdm.link/attshape
> > _______________________________________________
> > sleuthkit-users mailing list
> > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> > http://www.sleuthkit.org
>
>
>
> ------------------------------------------------------------------------------
> Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
> Francisco, CA to explore cutting-edge tech and listen to tech luminaries
> present their vision of the future. This family event has something for
> everyone, including kids. Get more information and register today.
> http://sdm.link/attshape
> _______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org
>

Re: [sleuthkit-users] Building SleuthKit from source on Windows with VC++

From: Edward D. <eld...@tr...> - 2016-07-12 12:27:09

<html>
  <head>
    <meta content="text/html; charset=utf-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">On 7/9/2016 10:47 AM, Kam Woods wrote:<br>
    </div>
    <blockquote
cite="mid:CAAOjFxDEtW+UfisAW4gb--uPDYuxz=o8s...@ma..."
      type="cite">
      <div dir="ltr">Yes - I have been using 20140608 for some time with
        both 4.2.0 and the TSK GitHub master. Configuring with
        --enable-v1-api and compiling on stock Ubuntu 14.04 and 16.04
        64-bit boxes. No code changes, compiles clean and everything
        seems to work.</div>
    </blockquote>
    I did not know about an " --enable-v1-api" switch, but this sounds
    as if I am compiling with an old version of libewf when  using it.
    Also the libewf-20140608.tar.gz file has Unix line endings and I am
    working on Windows with VC++.<br>
    <br>
    Eddie Diener<br>
    <blockquote
cite="mid:CAAOjFxDEtW+UfisAW4gb--uPDYuxz=o8s...@ma..."
      type="cite">
      <div dir="ltr">
        <div>
          <div><br>
          </div>
          <div>Kam</div>
        </div>
      </div>
      <div class="gmail_extra"><br>
        <div class="gmail_quote">On Sat, Jul 9, 2016 at 10:08 AM, Brian
          Carrier <span dir="ltr">&lt;<a moz-do-not-send="true"
              href="mailto:ca...@sl..." target="_blank">ca...@sl...</a>&gt;</span>
          wrote:<br>
          <blockquote class="gmail_quote" style="margin:0 0 0
            .8ex;border-left:1px #ccc solid;padding-left:1ex">Has anyone
            tried libewf-20140608.tar.gz to see if it works without TSK
            code changes?<br>
            <br>
            We tried the latest experimental a while back, but ran into
            some problems with that and backed off.<br>
            <div class="HOEnZb">
              <div class="h5"><br>
                <br>
                &gt; On Jul 9, 2016, at 12:28 AM, Edward Diener &lt;<a
                  moz-do-not-send="true"
                  href="mailto:eld...@tr...">eld...@tr...</a>&gt;
                wrote:<br>
                &gt;<br>
                &gt; On 7/8/2016 11:56 PM, Brian Carrier wrote:<br>
                &gt;&gt; We use the 64-bit version on github, but I have
                an email from Joachim a while back saying to go to <a
                  moz-do-not-send="true"
                  href="https://github.com/libyal/libewf/wiki"
                  rel="noreferrer" target="_blank">https://github.com/libyal/libewf/wiki</a>
                for the older stable releases, which eventually directs
                you to this google drive: <a moz-do-not-send="true"
href="https://53efc0a7187d0baa489ee347026b8278fe4020f6.googledrive.com/host/0B3fBvzttpiiSMTdoaVExWWNsRjg/"
                  rel="noreferrer" target="_blank">https://53efc0a7187d0baa489ee347026b8278fe4020f6.googledrive.com/host/0B3fBvzttpiiSMTdoaVExWWNsRjg/</a><br>
                &gt; None of those versions are compatible with the
                latest TSK, whether<br>
                &gt; 'develop' or 'master' branch. For the reason why
                please see<br>
                &gt; <a moz-do-not-send="true"
href="http://forum.sleuthkit.org/viewtopic.php?f=9&amp;t=2740&amp;sid=cc46e2042f4e0696d6e7c22ed2efc90a"
                  rel="noreferrer" target="_blank">http://forum.sleuthkit.org/viewtopic.php?f=9&amp;t=2740&amp;sid=cc46e2042f4e0696d6e7c22ed2efc90a</a>.<br>
                &gt; I have been using the 64-bit version on Sleuthkit's
                github configured<br>
                &gt; for both 32-bit and 64-bit configurations, but I
                believe this may be a<br>
                &gt; very old libewf version.<br>
                &gt;<br>
                &gt; Eddie Diener<br>
                &gt;&gt;<br>
                &gt;&gt;<br>
                &gt;&gt;&gt; On Jun 24, 2016, at 3:31 PM, Edward Diener
                &lt;<a moz-do-not-send="true"
                  href="mailto:eld...@tr...">eld...@tr...</a>&gt;
                wrote:<br>
                &gt;&gt;&gt;<br>
                &gt;&gt;&gt; In the instructions for building Sleuthkit
                from source on Windows with<br>
                &gt;&gt;&gt; the VC++ compiler it says in the
                win32/BUILDING.txt file:<br>
                &gt;&gt;&gt;<br>
                &gt;&gt;&gt; "1) Download libewf-20130128 (or later). 
                The official releases are from:<br>
                &gt;&gt;&gt;     <a moz-do-not-send="true"
                  href="http://sourceforge.net/projects/libewf/"
                  rel="noreferrer" target="_blank">http://sourceforge.net/projects/libewf/</a>"<br>
                &gt;&gt;&gt;<br>
                &gt;&gt;&gt; There is no longer a libewf-20130128
                release ( or any other libewf<br>
                &gt;&gt;&gt; release ) at Sourceforge and the only
                releases offered after that from<br>
                &gt;&gt;&gt; the libewf Github site are in Linux line
                ending format, come after the<br>
                &gt;&gt;&gt; libewf-20130128 release, and are
                incompatible with the current Sleuthkit<br>
                &gt;&gt;&gt; source, whether 'master' or 'develop'
                branch. Furthermore the libewf<br>
                &gt;&gt;&gt; Github source is also incompatible with
                SleuthKit, as explained at<br>
                &gt;&gt;&gt; <a moz-do-not-send="true"
                  href="http://forum.sleuthkit.org/viewtopic.php?f=9&amp;t=2740"
                  rel="noreferrer" target="_blank">http://forum.sleuthkit.org/viewtopic.php?f=9&amp;t=2740</a>.<br>
                &gt;&gt;&gt;<br>
                &gt;&gt;&gt; How can I get the libewf-20130128 release
                for Windows so I can build<br>
                &gt;&gt;&gt; Sleuthkit from source using VC++ ?<br>
                &gt;&gt;&gt;<br>
                &gt;&gt;&gt;<br>
                &gt;&gt;&gt;<br>
                &gt;&gt;&gt;
------------------------------------------------------------------------------<br>
                &gt;&gt;&gt; Attend Shape: An AT&amp;T Tech Expo July
                15-16. Meet us at AT&amp;T Park in San<br>
                &gt;&gt;&gt; Francisco, CA to explore cutting-edge tech
                and listen to tech luminaries<br>
                &gt;&gt;&gt; present their vision of the future. This
                family event has something for<br>
                &gt;&gt;&gt; everyone, including kids. Get more
                information and register today.<br>
                &gt;&gt;&gt; <a moz-do-not-send="true"
                  href="http://sdm.link/attshape" rel="noreferrer"
                  target="_blank">http://sdm.link/attshape</a><br>
                &gt;&gt;&gt;
                _______________________________________________<br>
                &gt;&gt;&gt; sleuthkit-users mailing list<br>
                &gt;&gt;&gt; <a moz-do-not-send="true"
                  href="https://lists.sourceforge.net/lists/listinfo/sleuthkit-users"
                  rel="noreferrer" target="_blank">https://lists.sourceforge.net/lists/listinfo/sleuthkit-users</a><br>
                &gt;&gt;&gt; <a moz-do-not-send="true"
                  href="http://www.sleuthkit.org" rel="noreferrer"
                  target="_blank">http://www.sleuthkit.org</a><br>
                &gt;<br>
                &gt;<br>
                &gt;<br>
                &gt;
------------------------------------------------------------------------------<br>
                &gt; Attend Shape: An AT&amp;T Tech Expo July 15-16.
                Meet us at AT&amp;T Park in San<br>
                &gt; Francisco, CA to explore cutting-edge tech and
                listen to tech luminaries<br>
                &gt; present their vision of the future. This family
                event has something for<br>
                &gt; everyone, including kids. Get more information and
                register today.<br>
                &gt; <a moz-do-not-send="true"
                  href="http://sdm.link/attshape" rel="noreferrer"
                  target="_blank">http://sdm.link/attshape</a><br>
                &gt; _______________________________________________<br>
                &gt; sleuthkit-users mailing list<br>
                &gt; <a moz-do-not-send="true"
                  href="https://lists.sourceforge.net/lists/listinfo/sleuthkit-users"
                  rel="noreferrer" target="_blank">https://lists.sourceforge.net/lists/listinfo/sleuthkit-users</a><br>
                &gt; <a moz-do-not-send="true"
                  href="http://www.sleuthkit.org" rel="noreferrer"
                  target="_blank">http://www.sleuthkit.org</a><br>
                <br>
                <br>
------------------------------------------------------------------------------<br>
                Attend Shape: An AT&amp;T Tech Expo July 15-16. Meet us
                at AT&amp;T Park in San<br>
                Francisco, CA to explore cutting-edge tech and listen to
                tech luminaries<br>
                present their vision of the future. This family event
                has something for<br>
                everyone, including kids. Get more information and
                register today.<br>
                <a moz-do-not-send="true"
                  href="http://sdm.link/attshape" rel="noreferrer"
                  target="_blank">http://sdm.link/attshape</a><br>
                _______________________________________________<br>
                sleuthkit-users mailing list<br>
                <a moz-do-not-send="true"
                  href="https://lists.sourceforge.net/lists/listinfo/sleuthkit-users"
                  rel="noreferrer" target="_blank">https://lists.sourceforge.net/lists/listinfo/sleuthkit-users</a><br>
                <a moz-do-not-send="true"
                  href="http://www.sleuthkit.org" rel="noreferrer"
                  target="_blank">http://www.sleuthkit.org</a><br>
              </div>
            </div>
          </blockquote>
        </div>
        <br>
      </div>
    </blockquote>
    <p><br>
    </p>
  </body>
</html>