Sleuthkit 3.0.0. package for Ubuntu

[etiennem]

Requesting a package upgrade for Sleuthkit 3.0.0.

Installation with sleuthkit-3.0.0.tar.gz give some errors when compiling

I use Ubuntu 8.10

PTK 1.0 needs Sleuthkit 3.0.0.

Regards,
Etienne

[Matej Kovacic (matej-kovacic)]

I would also like to see the new version of Sleuthkit. It is a great collection of tools, and I would also like to use it for PTK.

[Matej Kovacic (matej-kovacic)]

Simple how to install Sleuthkit 3.0 to Ubuntu: http://aderbal.muricinet.com.br/?p=220

[Nicolas Jungers (unbug)]

on debian (lenny/sid) and ubuntu the cpp package doesn't include g++. The fix to compile the sleuthkit 3.0.0 is to

aptitude install g++

[etiennem (etienneme)]

Hi,

I found the solution at http://www.nabble.com/compile-error-to20997681.html

I seems that ewf cause the problem..

Try './configure -disable-ewf' and then 'make'. Someone else had this
problem a while back and disabling libewf solved the problem. I
think the libewf folks were looking into the problem, but I don't
think I heard what the resolution was.

 Anyway for me this is a partial solution; Sleuthkit works but can't EnCase format evidence files

[Daniel T Chen (crimsun)]

Resolved in 10.04