Thread: [sleuthkit-users] new to the list
Brought to you by:
carrier
Menu
▾
▴
sleuthkit-users
|
From: eric <er...@ho...> - 2006-03-08 17:29:39
|
Hi, I'll cut to the chase: I'm trying to get autopsy to act as a server so I use the command: ./autopsy -p 8888 10.0.0.2 and then go to another computer on the same network open a browser and type in the autopsy url ...I get access denied you have been logged I am using newest firefox as the browser on the client computer I have installed sleuth kit and autopsy on my home drive ...what would I need to do to allow access to the autopsy url? I am just fooling around with the program right now, so I am not too worried about security at this point in time. Thanks for your time, eric |
|
From: eric <er...@ho...> - 2006-03-08 18:14:33
|
hmmm, I am using debian, I turned off firestarter and ran nmap on 10.0.0.2 and port 8888 was not filtered and showed as open I feel strongly that it is the way I have it setup ...I'm thinking I need to give permission to some directory on my machine, but I am not sure what directory or what permissions... Thanks again, eric Detective David Vitkus wrote: > eric wrote: > >> Hi, I'll cut to the chase: >> >> I'm trying to get autopsy to act as a server so I use the command: >> >> ./autopsy -p 8888 10.0.0.2 >> >> and then go to another computer on the same network open a browser and >> type in the autopsy url ...I get access denied you have been logged >> >> I am using newest firefox as the browser on the client computer >> >> >> I have installed sleuth kit and autopsy on my home drive ...what would I >> need to do to allow access to the autopsy url? >> >> I am just fooling around with the program right now, so I am not too >> worried about security at this point in time. >> >> Thanks for your time, >> eric >> >> >> ------------------------------------------------------- >> This SF.Net email is sponsored by xPML, a groundbreaking scripting >> language >> that extends applications into web and mobile media. Attend the live >> webcast >> and join the prime developer group breaking into this new coding >> territory! >> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642 >> _______________________________________________ >> sleuthkit-users mailing list >> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users >> http://www.sleuthkit.org >> >> > > > Eric, > Check the firewall settings on your Autopsy / Sleuthkit machine. Some > Linux distro's (I'm assuming your using it) install a firewall by > default. It may be blocking your port. > > Good luck > |
|
From: Brian C. <ca...@sl...> - 2006-03-08 18:58:25
|
The IP address you give on the command line corresponds to the computer that you are connecting from (not the computer autopsy is running on). It works as a filter to allow only one computer to connect. brian On Mar 8, 2006, at 1:13 PM, eric wrote: > hmmm, I am using debian, I turned off firestarter and ran nmap on > 10.0.0.2 and port 8888 was not filtered and showed as open > > I feel strongly that it is the way I have it setup ...I'm thinking I > need to give permission to some directory on my machine, but I am not > sure what directory or what permissions... > > Thanks again, > eric > > Detective David Vitkus wrote: >> eric wrote: >> >>> Hi, I'll cut to the chase: >>> >>> I'm trying to get autopsy to act as a server so I use the command: >>> >>> ./autopsy -p 8888 10.0.0.2 >>> >>> and then go to another computer on the same network open a >>> browser and >>> type in the autopsy url ...I get access denied you have been logged >>> >>> I am using newest firefox as the browser on the client computer >>> >>> >>> I have installed sleuth kit and autopsy on my home drive ...what >>> would I >>> need to do to allow access to the autopsy url? >>> >>> I am just fooling around with the program right now, so I am not too >>> worried about security at this point in time. >>> >>> Thanks for your time, >>> eric >>> >>> >>> ------------------------------------------------------- >>> This SF.Net email is sponsored by xPML, a groundbreaking scripting >>> language >>> that extends applications into web and mobile media. Attend the live >>> webcast >>> and join the prime developer group breaking into this new coding >>> territory! >>> http://sel.as-us.falkag.net/sel? >>> cmd=lnk&kid=110944&bid=241720&dat=121642 >>> _______________________________________________ >>> sleuthkit-users mailing list >>> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users >>> http://www.sleuthkit.org >>> >>> >> >> >> Eric, >> Check the firewall settings on your Autopsy / Sleuthkit machine. >> Some >> Linux distro's (I'm assuming your using it) install a firewall by >> default. It may be blocking your port. >> >> Good luck >> > > > ------------------------------------------------------- > This SF.Net email is sponsored by xPML, a groundbreaking scripting > language > that extends applications into web and mobile media. Attend the > live webcast > and join the prime developer group breaking into this new coding > territory! > http://sel.as-us.falkag.net/sel? > cmd=lnk&kid=110944&bid=241720&dat=121642 > _______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org > > |
|
From: eric <er...@ho...> - 2006-03-09 13:37:39
|
Thanks Brian, ok so I have another Q. I can't connect a windows 98 machine while it is booted with windows 98 and anylize from my autopsy server can I? thanks again, eric Brian Carrier wrote: > The IP address you give on the command line corresponds to the computer > that you are connecting from (not the computer autopsy is running on). > It works as a filter to allow only one computer to connect. > > brian > > > On Mar 8, 2006, at 1:13 PM, eric wrote: > >> hmmm, I am using debian, I turned off firestarter and ran nmap on >> 10.0.0.2 and port 8888 was not filtered and showed as open >> >> I feel strongly that it is the way I have it setup ...I'm thinking I >> need to give permission to some directory on my machine, but I am not >> sure what directory or what permissions... >> >> Thanks again, >> eric >> >> Detective David Vitkus wrote: >> >>> eric wrote: >>> >>>> Hi, I'll cut to the chase: >>>> >>>> I'm trying to get autopsy to act as a server so I use the command: >>>> >>>> ./autopsy -p 8888 10.0.0.2 >>>> >>>> and then go to another computer on the same network open a browser and >>>> type in the autopsy url ...I get access denied you have been logged >>>> >>>> I am using newest firefox as the browser on the client computer >>>> >>>> >>>> I have installed sleuth kit and autopsy on my home drive ...what >>>> would I >>>> need to do to allow access to the autopsy url? >>>> >>>> I am just fooling around with the program right now, so I am not too >>>> worried about security at this point in time. >>>> >>>> Thanks for your time, >>>> eric >>>> >>>> >>>> ------------------------------------------------------- >>>> This SF.Net email is sponsored by xPML, a groundbreaking scripting >>>> language >>>> that extends applications into web and mobile media. Attend the live >>>> webcast >>>> and join the prime developer group breaking into this new coding >>>> territory! >>>> http://sel.as-us.falkag.net/sel? >>>> cmd=lnk&kid=110944&bid=241720&dat=121642 >>>> _______________________________________________ >>>> sleuthkit-users mailing list >>>> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users >>>> http://www.sleuthkit.org >>>> >>>> >>> >>> >>> Eric, >>> Check the firewall settings on your Autopsy / Sleuthkit machine. Some >>> Linux distro's (I'm assuming your using it) install a firewall by >>> default. It may be blocking your port. >>> >>> Good luck >>> >> >> >> ------------------------------------------------------- >> This SF.Net email is sponsored by xPML, a groundbreaking scripting >> language >> that extends applications into web and mobile media. Attend the live >> webcast >> and join the prime developer group breaking into this new coding >> territory! >> http://sel.as-us.falkag.net/sel? cmd=lnk&kid=110944&bid=241720&dat=121642 >> _______________________________________________ >> sleuthkit-users mailing list >> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users >> http://www.sleuthkit.org >> >> > > > > ------------------------------------------------------- > This SF.Net email is sponsored by xPML, a groundbreaking scripting language > that extends applications into web and mobile media. Attend the live > webcast > and join the prime developer group breaking into this new coding territory! > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642 > _______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org |
|
From: Brian C. <ca...@sl...> - 2006-03-09 15:29:51
|
On Mar 9, 2006, at 8:37 AM, eric wrote: > Thanks Brian, ok so I have another Q. I can't connect a windows 98 > machine while it is booted with windows 98 and anylize from my autopsy > server can I? I'm not quite clear on what you are asking. Are you trying to analyze a live Windows 98 system (i.e. run Autopsy / TSK on Windows 98) or are you trying to use a web browser on a Windows 98 computer to connect to another computer that is running autopsy. If it is the first, then it can't currently be done. If it is the second, then you should be able to. brian |
|
From: eric <er...@ho...> - 2006-03-09 15:47:49
|
Yes, for the first. I was trying to analyze a live Windows 98 system, but could not add c:\ ...I got the picture now thanks. Brian Carrier wrote: > On Mar 9, 2006, at 8:37 AM, eric wrote: > >> Thanks Brian, ok so I have another Q. I can't connect a windows 98 >> machine while it is booted with windows 98 and anylize from my autopsy >> server can I? > > > I'm not quite clear on what you are asking. Are you trying to analyze a > live Windows 98 system (i.e. run Autopsy / TSK on Windows 98) or are > you trying to use a web browser on a Windows 98 computer to connect to > another computer that is running autopsy. If it is the first, then it > can't currently be done. If it is the second, then you should be able to. > > brian > > > > > ------------------------------------------------------- > This SF.Net email is sponsored by xPML, a groundbreaking scripting language > that extends applications into web and mobile media. Attend the live > webcast > and join the prime developer group breaking into this new coding territory! > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642 > _______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org |
Thanks for helping keep SourceForge clean.
X