Hello,
I was wondering if anyone had seen this before...
Command: hfind db.hash [hash value]
Error: "Cannot determine hash database type (hdb_setupindx: Unknown
Database Type in index header: encase)
OS: Ubuntu 12.04 (3.5.0)
Desc: Attempting lookup against Encase hash db - error does NOT occur
with NSRL or md5sum db. Same hash files work with encase (copied
directly from hash sets folder).
I first had the error with the Sleuth Kit 4.0.1, updated aff, ewf and
the Sleuth Kit from source. Same error with the Sleuth Kit 4.1.0.
hfind -i encase db.hash successfully creates the index.
Thanks!
------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:
Build for Windows Store.
http://p.sf.net/sfu/windows-dev2dev_______________________________________________
sleuthkit-users mailing list
https://lists.sourceforge.net/lists/listinfo/sleuthkit-usershttp://www.sleuthkit.org