ECToo / volatility

Automatically exported from code.google.com/p/volatility
GNU General Public License v2.0
0 stars 0 forks source link

imageinfo takes forever #523

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
I'm a newbie. i wanna know my suggested profiles of the mem dump and i wrote 
"python vol.py imageinfo -f /path/dumpfile.raw". but it scans too long.. about 
3-4 hours and nothing happened. Size of the dumped memory is 3.4gb6. 
Is there anyway to reduce a memory dump file? or should i wait?

What version of the product are you using? On what operating system?
i use kali linux on virtual machine.

Please provide any additional information below.

Sorry for my poor english. 

Original issue reported on code.google.com by bilguune...@gmail.com on 17 Feb 2015 at 3:02

GoogleCodeExporter commented 9 years ago
Hi there,

Please file your issue on 
https://github.com/volatilityfoundation/volatility/issues

Also be aware that imageinfo works by trying every possible profile against the 
image, which on a 3.4 Gb drive, will take a long time (particular given how 
many profiles are now supported).

Marking as a duplicate of 521.

Original comment by mike.auty@gmail.com on 18 Feb 2015 at 6:51