hfind - hdb_setupindex: Unknown database type in index header

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

hfind - hdb_setupindex: Unknown database type in index header

Joshua
Hello,
I was wondering if anyone had seen this before...

Command: hfind db.hash [hash value]
Error: "Cannot determine hash database type (hdb_setupindx: Unknown
Database Type in index header: encase)

OS: Ubuntu 12.04 (3.5.0)
Desc: Attempting lookup against Encase hash db - error does NOT occur
with NSRL or md5sum db. Same hash files work with encase (copied
directly from hash sets folder).

I first had the error with the Sleuth Kit 4.0.1, updated aff, ewf and
the Sleuth Kit from source. Same error with the Sleuth Kit 4.1.0.

hfind -i encase db.hash successfully creates the index.

Thanks!


------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:

Build for Windows Store.

http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
sleuthkit-users mailing list
https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
http://www.sleuthkit.org