On Thu, Oct 20, 2011 at 4:34 AM, Togan Muftuoglu <toganm@opensuse.org> wrote:

Hi Greg,

On 10/20/2011 02:00 AM, Greg Freemyer wrote:

...

Togan,

You may have noted I got Sleuthkit into factory.

Well done you :)

...

This afternoon, I've been trying to build fiwalk based of it and I'm having an issue with libtsk3.

( home:gregfreemyer:Tools-for-forensic-boot-cd > fiwalk )

The filelist for libtsk3-3 has:

/usr/lib64/libtsk3.so.3 /usr/lib64/libtsk3.so.3.4.0

Should that be enough for fiwalk to link against it?

No because you are missing the devel libraries. I have a working spec in my home:toganm:security project and have a look and branch it if you want. I left the plugins part for you to sort ;)

Togan

Thanks for doing that. I should have known I needed the devel package(s).  Sorry about that. But what do you mean by "the plugins part"? My first guess was the ewf and aff libraries, but you have that done too from what I see? fyi: fiwalk now builds in my home as well as yours and I've installed it, but I haven't yet tried to walk a forensic image. Thanks Greg -- Greg Freemyer Head of EDD Tape Extraction and Processing team Litigation Triage Solutions Specialist http://www.linkedin.com/in/gregfreemyer CNN/TruTV Aired Forensic Imaging Demo -    http://insession.blogs.cnn.com/2010/03/23/how-computer-evidence-gets-retriev... The Norcross Group The Intersection of Evidence & Technology http://www.norcrossgroup.com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org