Errors Installing Plaso 1.4 to Mac and SIFT

119 views
Skip to first unread message

chad....@gmail.com

unread,
Jan 25, 2016, 6:50:46 PM1/25/16
to log2timeline-discuss
Hi, I received the following error(s) when I attempted to install Plaso 1.4 to my Mac as root. Please note I am new to Mac:

sh-3.2# cd /Volumes/plaso-1.4.0/

sh-3.2# ./install.sh 

===============================================================

               Plaso Mac OS-X installation script

===============================================================

./install.sh: line 31: syntax error near unexpected token `do'

./install.sh: line 31: `do'

sh-3.2# 


I encountered the following when I attempted to update the version in SANS SIFT 3.0 Ubuntu. The errors appear to be associated with the plaso-python pointing to Plaso 1.3.x. I have approximately 4 years experience with Linux and 3 years with the SANS SIFT:

root@siftworkstation:~# log2timeline.py -v

log2timeline - plaso back-end 1.2.2

root@siftworkstation:~# apt-get install python-plaso

Reading package lists... Done

Building dependency tree       

Reading state information... Done

The following extra packages will be installed:

  libsigscan libsigscan-python python-artifacts python-binplist python-mock

  python-xlsxwriter python-zmq

Suggested packages:

  libsigscan-dbg libsigscan-python-dbg python-mock-doc

Recommended packages:

  pyelasticsearch

The following NEW packages will be installed:

  libsigscan libsigscan-python python-artifacts python-binplist python-mock

  python-xlsxwriter python-zmq

The following packages will be upgraded:

  python-plaso

1 upgraded, 7 newly installed, 0 to remove and 329 not upgraded.

Need to get 1,226 kB/1,951 kB of archives.

After this operation, 10.6 MB of additional disk space will be used.

Do you want to continue? [Y/n] y

Err http://ppa.launchpad.net/gift/dev/ubuntu/ trusty/main python-plaso all 1.3.1-dev-20151206-1ppa1~trusty

  404  Not Found

Err http://ppa.launchpad.net/gift/dev/ubuntu/ trusty/main python-xlsxwriter all 0.7.7-1ppa1~trusty

  404  Not Found

E: Failed to fetch http://ppa.launchpad.net/gift/dev/ubuntu/pool/main/p/python-plaso/python-plaso_1.3.1-dev-20151206-1ppa1~trusty_all.deb  404  Not Found


E: Failed to fetch http://ppa.launchpad.net/gift/dev/ubuntu/pool/main/p/python-xlsxwriter/python-xlsxwriter_0.7.7-1ppa1~trusty_all.deb  404  Not Found



Thank you for your help,

Chad

Kristinn Gudjonsson

unread,
Jan 25, 2016, 7:08:38 PM1/25/16
to chad....@gmail.com, log2timeline-discuss
Hi

First of all, on the SIFT, are you sure you did

apt-get update

Before running the apt-get upgrade. Also do you have the GIFT repo set up on your SIFT workstation? 
you can check by simply running:

$ grep launchpad /etc/apt/sources.list /etc/apt/sources.list.d/*


If you don't have a line similar to this:


you'll need to add the GIFT repo, run apt-get update and then apt-get upgrade.

However the installer on Mac is broken, that needs to be fixed. thank you for pointing that out.


--
You received this message because you are subscribed to the Google Groups "log2timeline-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to log2timeline-dis...@googlegroups.com.
To post to this group, send email to log2timeli...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
--

--
with regards

Kristinn

p.s sorry for all spleling mistakes, this email have been written by large thumbs on a tiny mobile screen. If not and it was written on the web I've got no excuses what so ever.

Greg Freemyer

unread,
Jan 25, 2016, 10:59:17 PM1/25/16
to Kristinn Gudjonsson, chad....@gmail.com, log2timeline-discuss
Kristinn,

I see v1.4.0 in github releases, but is there a release announcement?
I'm curious what improvements are included in v1.4.0

Thanks
Greg
--
Greg Freemyer
www.IntelligentAvatar.net

Kristinn Gudjonsson

unread,
Jan 26, 2016, 10:06:11 AM1/26/16
to Greg Freemyer, chad....@gmail.com, log2timeline-discuss
Reply all
Reply to author
Forward
0 new messages