@ChemBro
The recent QT updates seem to have removed a few dependencies like QTWebKit and stuff, right now it's the DFF team that is supposed to work on fixing these.
Refer to: https://github.com/arxsys/dff/issues/20#issuecomment-281703381
They say they are working on it, but your best bet is to use a pre-compiled package now on Ubuntu VM or something.
Search Criteria
Package Details: dff-git 20160519.d40d46b-1
| Git Clone URL: | https://aur.archlinux.org/dff-git.git (read-only, click to copy) |
|---|---|
| Package Base: | dff-git |
| Description: | A Forensics Framework coming with command line and graphical interfaces. |
| Upstream URL: | https://github.com/arxsys/dff |
| Keywords: | data digital forensics framework investigation |
| Licenses: | |
| Conflicts: | |
| Provides: | |
| Submitter: | jarylc |
| Maintainer: | jarylc |
| Last Packager: | jarylc |
| Votes: | 0 |
| Popularity: | 0.000000 |
| First Submitted: | 2017-01-12 08:45 |
| Last Updated: | 2017-01-26 07:54 |
Dependencies (35)
- ffmpeg (ffmpeg-semifull-git, ffmpeg-tmblock-git, ffmpeg4.0, ffmpeg-ubuntu-bionic, ffmpeg-svt, ffmpeg-git, ffmpeg-headless, ffmpeg-git-nc, ffmpeg-qsv-git, ffmpeg-amd-full-git, ffmpeg-qsv, ffmpeg-libfdk_aac, ffmpeg-decklink, ffmpeg-full-git, ffmpeg-full, ffmpeg-intel-full-git, ffmpeg-mmal, ffmpeg-full-nvenc, ffmpeg-gl-transition, ffmpeg-cuda, ffmpeg-ndi)
- fuse (fuse2)
- libbde-git
- libbfio-git
- libewf-git
- libpff-git
- libvshadow-git
- poppler-qt4
- python-pyqt4
- python2-apsw
- python2-magic
- python2-pillow
- python2-poppler-qt4
- python2-pyqt4
- qt4 (qt4-revert80e3108)
- autoconf (autoconf-git) (make)
- automake (automake-1.7, automake-1.14, automake-git, automake-1.11, automake-1.15) (make)
- bison (byacc-bison, bison-git) (make)
- cmake (cmake-git) (make)
- flex (flex-android, flex-git) (make)
- gettext (gettext-git) (make)
- git (git-git) (make)
- libbde-git (make)
- libbfio-git (make)
- libewf-git (make)
- libpff-git (make)
- libtool (libtool-git) (make)
- libvshadow-git (make)
- pkg-config (pkgconf-git, pkgconf) (make)
- swig (swig-git) (make)
- tre (make)
- libreoffice-fresh (optional) – documents support
- python2-pefile (optional) – PE files support
- reglookup (optional) – registry hives support
- volatility (volatility-git) (optional) – volatile memory support
Required by (0)
Sources (2)
Latest Comments
jarylc commented on 2017-06-11 02:22
ChemBro commented on 2017-06-10 12:25
Looks like I can't start the gui. Does that mean, there is a dependency missing?
$ dff-gui
Traceback (most recent call last):
File "/usr/bin/dff-gui", line 24, in <module>
from dff.ui.gui.gui import GUI
File "/usr/bin/dff/ui/gui/gui.py", line 23, in <module>
from dff.ui.gui.mainwindow import MainWindow
File "/usr/bin/dff/ui/gui/mainwindow.py", line 31, in <module>
from dff.api.gui.widget.nodelistwidgets import NodeListWidgets
File "/usr/bin/dff/api/gui/widget/nodelistwidgets.py", line 32, in <module>
from dff.api.gui.widget.nodewidget import NodeWidget, TimeLineNodeWidget
File "/usr/bin/dff/api/gui/widget/nodewidget.py", line 29, in <module>
from dff.ui.gui.utils.menumanager import MenuManager
File "/usr/bin/dff/ui/gui/utils/menumanager.py", line 18, in <module>
from PyQt4 import QtCore, QtGui, QtWebKit
ImportError: cannot import name QtWebKit
jarylc commented on 2017-01-12 23:58
Currently there is a compatibility issue with the Reglookup AUR package as it only installs for Python 3, you would either need to modify the PKGBUILD for Python 2 support with this as last package() step:
cp -r $pkgdir/usr/lib/python3.6 $pkgdir/usr/lib/python2.7
Or run this command as root after Reglookup is installed (not recommended):
cp -r /usr/lib/python3.6/Reglookup /usr/lib/python2.7/Reglookup
As mentioned it's best to reinstall Reglookup instead as it's cleaner. I have contacted the maintainer by comment and hope he reviews it soon.
@noraj
noraj commented on 2017-01-12 20:37
Install successfully from an up-to-date system.
But some (non-blocking) python import error when launching dff-gui:
```
libpng warning: iCCP: known incorrect sRGB profile
ImportError: No module named pyregfi
File "/usr/bin/dff/api/loader/loader.py", line 239, in __load
module = imp.load_module(modname, file, pathname, description)
File "/usr/lib/python2.7/site-packages/dff/modules/databases/winreg/winreg.py", line 25, in <module>
from hive import RHive
File "/usr/lib/python2.7/site-packages/dff/modules/databases/winreg/hive.py", line 15, in <module>
import pyregfi
```
jarylc commented on 2017-01-12 09:09
I have tested this on two dirty systems, both installed successfully. I have not tried on a fresh system to find other missing dependencies as all the documents of DFF has discrepencies in the dependencies.
Do inform me on any missing dependencies which I may have missed.
Pinned Comments
jarylc commented on 2017-01-12 23:58
Currently there is a compatibility issue with the Reglookup AUR package as it only installs for Python 3, you would either need to modify the PKGBUILD for Python 2 support with this as last package() step:
cp -r $pkgdir/usr/lib/python3.6 $pkgdir/usr/lib/python2.7
Or run this command as root after Reglookup is installed (not recommended):
cp -r /usr/lib/python3.6/Reglookup /usr/lib/python2.7/Reglookup
As mentioned it's best to reinstall Reglookup instead as it's cleaner. I have contacted the maintainer by comment and hope he reviews it soon.
@noraj
jarylc commented on 2017-01-12 09:09
I have tested this on two dirty systems, both installed successfully. I have not tried on a fresh system to find other missing dependencies as all the documents of DFF has discrepencies in the dependencies.
Do inform me on any missing dependencies which I may have missed.