search

sepinf-inc / IPED

IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by law enforcement or in a corporate investigation by private examiners.
Other
969 stars 219 forks source link

Not found folder datasource look up and replacement may fail #785

Closed kraftdenker closed 3 years ago

kraftdenker commented 3 years ago

Release 3.18.9 I detected an unsuccessful export of items in a scenario where a case has been processed in a Linux OS, and when analyzing and exporting in Windows OS, the selected or maked files to export become 0ed length exported files.

lfcnassif commented 3 years ago

By "exporting in Windows" do you mean "creating a report" or really the UI export files feature? Could you provide the first (on Linux) and second (on Windows) processing logs? Did the UI (on windows) find the processed evidence (just left click on an actual file, not a subitem, and check the hex viewer)? Maybe the original evidence wasn't found because of different paths on different systems.

kraftdenker commented 3 years ago

Hello, I mean the UI export files feature. In previous versions, when opening processed case in Linux into windows, IPED detects different path of evidence and offer a File Dialog to choose the right path. In v.3.18.9, there is no file dialog opening the case. I guess that the problem's origin is different path separator on different systems.

Am Di., 19. Okt. 2021 um 12:58 Uhr schrieb Luis Nassif < @.***>:

By "exporting in Windows" do you mean "creating a report" or really the UI export files feature? Could you provide the first (on Linux) and second (on Windows) processing logs? Did the UI (on windows) find the processed evidence (just left click on an actual file, not a subitem, and check the hex viewer)? Maybe the original evidence wasn't found because of different paths on different systems.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/sepinf-inc/IPED/issues/785#issuecomment-946867224, or unsubscribe https://github.com/notifications/unsubscribe-auth/AFVAK4VCLUJLAV6XBYQ4XYDUHWISFANCNFSM5GJPCTJQ .

-- A.M

lfcnassif commented 3 years ago

Have you tried the 3.18.8 version? Maybe this change is related: https://github.com/sepinf-inc/IPED/blob/master/ReleaseNotes.txt#L110

How did you configure the case on Linux? To automatically export files from evidence, editing the CategoriesToExport.txt config? Providing the used profile and the processing log on Linux would help to reproduce and confirm this.

I mean the UI export files feature

So please also provide the IPED-SearchApp.log GUI log file.

kraftdenker commented 3 years ago

I've not tried 3.18.8. It is set default profile, and CategoriesToExport.txt with no changes. I copy bellow the log file 9IPED-SearchApp.log). This excerpt starts with the export attempts in Windows and goes on until the successful export in Linux.

2021-10-18 10:59:12 [INFO] [indexer.desktop.PesquisarIndice] Filtering for bookmarks "Interesse" 2021-10-18 10:59:25 [INFO] [indexer.desktop.FileProcessor] Opening sdcard/WhatsApp/Media/WhatsApp Video/VID-20210423-WA0226.mp4 2021-10-18 10:59:34 [INFO] [indexer.desktop.FileProcessor] Opening sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0122.mp4 2021-10-18 10:59:41 [INFO] [indexer.desktop.FileProcessor] Opening sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0125.mp4 2021-10-18 11:12:53 [INFO] [indexer.desktop.FileProcessor] Opening sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0123.mp4 2021-10-18 11:13:11 [INFO] [indexer.desktop.CopiarArquivos] Exporting files to X:\EmAndamento\2021SP8761_9657_XIAOMI_REDMI_NOTE_8PRO_9664_MOPTICA\Compare 2021-10-18 11:13:11 [INFO] [indexer.desktop.CopiarArquivos] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/VID-20210423-WA0226.mp4 2021-10-18 11:13:11 [INFO] [indexer.desktop.CopiarArquivos] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0122.mp4 2021-10-18 11:13:11 [INFO] [indexer.desktop.CopiarArquivos] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0125.mp4 2021-10-18 11:13:11 [INFO] [indexer.desktop.CopiarArquivos] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0124.mp4 2021-10-18 11:13:11 [INFO] [indexer.desktop.CopiarArquivos] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210423-WA0111.mp4 2021-10-18 11:13:11 [INFO] [indexer.desktop.CopiarArquivos] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0130.mp4 2021-10-18 11:13:11 [INFO] [indexer.desktop.CopiarArquivos] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0121.mp4 2021-10-18 11:13:11 [INFO] [indexer.desktop.CopiarArquivos] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210423-WA0112.mp4 2021-10-18 11:13:11 [INFO] [indexer.desktop.CopiarArquivos] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0128.mp4 2021-10-18 11:13:11 [INFO] [indexer.desktop.CopiarArquivos] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0123.mp4 2021-10-18 11:14:15 [INFO] [indexer.search.Marcadores] Saving state to file X:\EmAndamento\2021SP8761_9657_XIAOMI_REDMI_NOTE_8PRO_9664_MOPTICA\iped\indexador\marcadores.iped 2021-10-18 11:14:28 [INFO] [indexer.desktop.ExportFilesToZip] Exporting files to X:\EmAndamento\2021SP8761_9657_XIAOMI_REDMI_NOTE_8PRO_9664_MOPTICA\ArquivosExportados.zip 2021-10-18 11:14:28 [INFO] [indexer.desktop.ExportFilesToZip] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/VID-20210423-WA0226.mp4 2021-10-18 11:14:28 [INFO] [indexer.desktop.ExportFilesToZip] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210423-WA0112.mp4 2021-10-18 11:14:28 [INFO] [indexer.desktop.ExportFilesToZip] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0128.mp4 2021-10-18 11:14:28 [INFO] [indexer.desktop.ExportFilesToZip] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0123.mp4 2021-10-18 11:14:28 [INFO] [indexer.desktop.ExportFilesToZip] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0122.mp4 2021-10-18 11:14:28 [INFO] [indexer.desktop.ExportFilesToZip] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0125.mp4 2021-10-18 11:14:28 [INFO] [indexer.desktop.ExportFilesToZip] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0124.mp4 2021-10-18 11:14:28 [INFO] [indexer.desktop.ExportFilesToZip] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210423-WA0111.mp4 2021-10-18 11:14:28 [INFO] [indexer.desktop.ExportFilesToZip] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0121.mp4 2021-10-18 11:14:28 [INFO] [indexer.desktop.ExportFilesToZip] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0130.mp4 2021-10-18 11:14:28 [INFO] [indexer.desktop.ExportFilesToZip] MD5 of X:\EmAndamento\2021SP8761_9657_XIAOMI_REDMI_NOTE_8PRO_9664_MOPTICA\ArquivosExportados.zip: C73D3EEA11C33128F462725E2062E0B6 2021-10-18 11:15:03 [INFO] [indexer.desktop.FileProcessor] Opening sdcard/WhatsApp/Media/WhatsApp Video/VID-20210423-WA0226.mp4 2021-10-18 11:15:15 [INFO] [indexer.desktop.FileProcessor] Opening sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0123.mp4 2021-10-18 11:15:37 [INFO] [indexer.desktop.ExportFileTree] Exporting files to X:\EmAndamento\2021SP8761_9657_XIAOMI_REDMI_NOTE_8PRO_9664_MOPTICA\iped\ArquivosExportados.zip 2021-10-18 11:15:38 [INFO] [indexer.desktop.ExportFileTree] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/VID-20210423-WA0226.mp4 2021-10-18 11:15:38 [INFO] [indexer.desktop.ExportFileTree] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0122.mp4 2021-10-18 11:15:38 [INFO] [indexer.desktop.ExportFileTree] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0125.mp4 2021-10-18 11:15:38 [INFO] [indexer.desktop.ExportFileTree] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0124.mp4 2021-10-18 11:15:38 [INFO] [indexer.desktop.ExportFileTree] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210423-WA0111.mp4 2021-10-18 11:15:38 [INFO] [indexer.desktop.ExportFileTree] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0130.mp4 2021-10-18 11:15:38 [INFO] [indexer.desktop.ExportFileTree] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0121.mp4 2021-10-18 11:15:38 [INFO] [indexer.desktop.ExportFileTree] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210423-WA0112.mp4 2021-10-18 11:15:38 [INFO] [indexer.desktop.ExportFileTree] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0128.mp4 2021-10-18 11:15:38 [INFO] [indexer.desktop.ExportFileTree] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0123.mp4 2021-10-18 11:15:38 [INFO] [indexer.desktop.ExportFileTree] MD5 of X:\EmAndamento\2021SP8761_9657_XIAOMI_REDMI_NOTE_8PRO_9664_MOPTICA\iped\ArquivosExportados.zip: 0E57C4533E59907EE938425D09D8195D 2021-10-18 11:16:26 [INFO] [indexer.desktop.PesquisarIndice] Searching for query +(categoria:programas e bibliotecas) +: 2021-10-18 11:16:26 [INFO] [indexer.desktop.PesquisarIndice] Filtering for bookmarks "Interesse" 2021-10-18 11:16:28 [INFO] [indexer.desktop.PesquisarIndice] Searching for query : 2021-10-18 11:16:31 [INFO] [indexer.desktop.PesquisarIndice] Searching for query : 2021-10-18 11:16:31 [INFO] [indexer.desktop.PesquisarIndice] Filtering for bookmarks "Interesse" 2021-10-18 11:16:51 [INFO] [indexer.desktop.CopiarArquivos] Exporting files to X:\EmAndamento\2021SP8761_9657_XIAOMI_REDMI_NOTE_8PRO_9664_MOPTICA\Compare 2021-10-18 11:16:51 [INFO] [indexer.desktop.CopiarArquivos] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/VID-20210423-WA0226.mp4 2021-10-18 11:16:51 [INFO] [indexer.desktop.CopiarArquivos] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210423-WA0112.mp4 2021-10-18 11:16:51 [INFO] [indexer.desktop.CopiarArquivos] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0128.mp4 2021-10-18 11:16:51 [INFO] [indexer.desktop.CopiarArquivos] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0123.mp4 2021-10-18 11:16:51 [INFO] [indexer.desktop.CopiarArquivos] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0122.mp4 2021-10-18 11:16:51 [INFO] [indexer.desktop.CopiarArquivos] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0125.mp4 2021-10-18 11:16:51 [INFO] [indexer.desktop.CopiarArquivos] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0124.mp4 2021-10-18 11:16:51 [INFO] [indexer.desktop.CopiarArquivos] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210423-WA0111.mp4 2021-10-18 11:16:51 [INFO] [indexer.desktop.CopiarArquivos] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0121.mp4 2021-10-18 11:16:51 [INFO] [indexer.desktop.CopiarArquivos] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0130.mp4 2021-10-18 11:20:13 [INFO] [indexer.desktop.ExportFilesToZip] Exporting files to C:\Users[ommited]\Downloads\ArquivosExportados.zip 2021-10-18 11:20:13 [INFO] [indexer.desktop.ExportFilesToZip] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/VID-20210423-WA0226.mp4 2021-10-18 11:20:13 [INFO] [indexer.desktop.ExportFilesToZip] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210423-WA0112.mp4 2021-10-18 11:20:13 [INFO] [indexer.desktop.ExportFilesToZip] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0128.mp4 2021-10-18 11:20:13 [INFO] [indexer.desktop.ExportFilesToZip] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0123.mp4 2021-10-18 11:20:13 [INFO] [indexer.desktop.ExportFilesToZip] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0122.mp4 2021-10-18 11:20:13 [INFO] [indexer.desktop.ExportFilesToZip] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0125.mp4 2021-10-18 11:20:13 [INFO] [indexer.desktop.ExportFilesToZip] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0124.mp4 2021-10-18 11:20:13 [INFO] [indexer.desktop.ExportFilesToZip] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210423-WA0111.mp4 2021-10-18 11:20:13 [INFO] [indexer.desktop.ExportFilesToZip] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0121.mp4 2021-10-18 11:20:13 [INFO] [indexer.desktop.ExportFilesToZip] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0130.mp4 2021-10-18 11:20:13 [INFO] [indexer.desktop.ExportFilesToZip] MD5 of C:\Users[ommited]\Downloads\ArquivosExportados.zip: 8534F8664594892E94C82E579DF62FA1 2021-10-18 11:21:39 [INFO] [indexer.desktop.AppMain] Indexador e Processador de Evidências Digitais 3.18.9 2021-10-18 11:21:39 [INFO] [indexer.util.LibreOfficeFinder] Detected LibreOffice 6 /usr/lib/libreoffice 2021-10-18 11:21:39 [INFO] [indexer.util.CustomLoader] Adding to classpath: /media/[ommited]/ferramentas/FerramentasZ820/Ferramentas/Forense/sleuthkit-APFS/bindings/java/dist/sleuthkit-4.6.5.jar 2021-10-18 11:21:39 [INFO] [indexer.util.CustomLoader] Adding to classpath: /usr/share/java/ridl-6.4.7.jar 2021-10-18 11:21:39 [INFO] [indexer.util.CustomLoader] Adding to classpath: /usr/share/java/jurt-6.4.7.jar 2021-10-18 11:21:39 [INFO] [indexer.util.CustomLoader] Adding to classpath: /usr/share/java/juh-6.4.7.jar 2021-10-18 11:21:39 [INFO] [indexer.util.CustomLoader] Adding to classpath: /usr/lib/libreoffice/program/classes/unoil.jar 2021-10-18 11:21:39 [INFO] [indexer.util.CustomLoader] Adding to classpath: /usr/lib/libreoffice/program 2021-10-18 11:21:39 [INFO] [indexer.util.CustomLoader] Adding to classpath: /usr/lib/libreoffice/program/classes/officebean.jar 2021-10-18 11:21:40 [INFO] [gpinf.indexer.Configuration] Loading configuration from [ommited]/2021SP8761_9657_XIAOMI_REDMI_NOTE_8PRO_9664_MOPTICA/iped/./indexador 2021-10-18 11:21:40 [INFO] [indexer.desktop.App] Starting... 2021-10-18 11:21:42 [ERROR] [parsers.external.ExternalParsersConfigReader] Error testing PrefetchParser. Disable it in conf/ExternalParsers.xml or install 'sccainfo' 2021-10-18 11:21:42 [ERROR] [parsers.external.ExternalParsersConfigReader] Error testing EvtxLogParser. Disable it in conf/ExternalParsers.xml or install 'evtxexport' 2021-10-18 11:21:42 [ERROR] [parsers.external.ExternalParsersConfigReader] Error testing EvtLogParser. Disable it in conf/ExternalParsers.xml or install 'evtexport' 2021-10-18 11:21:42 [ERROR] [parsers.external.ExternalParsersConfigReader] Error testing SuperFetchParser. Disable it in conf/ExternalParsers.xml or install 'agdbinfo' 2021-10-18 11:21:43 [WARN] [tika.config.InitializableProblemHandler$3] J2KImageReader not loaded. JPEG2000 files will not be processed. See https://pdfbox.apache.org/2.0/dependencies.html#jai-image-io for optional dependencies.

2021-10-18 11:21:43 [INFO] [browsers.parsers.EdgeWebCacheParser] Libesedb library version: 20181229 2021-10-18 11:21:44 [WARN] [indexer.parsers.PDFOCRTextParser] Plugin JPEG2000 not found, JPX images will not be decoded from PDFs. You can download it from https://mvnrepository.com/artifact/com.github.jai-imageio/jai-imageio-jpeg2000/1.3.0 and put it in optional_jars folder. Warn: that plugin is worse to decode JPX outside of PDFs! 2021-10-18 11:21:45 [INFO] [indexer.desktop.App$1] GUI created 2021-10-18 11:21:45 [INFO] [indexer.search.IPEDSource] Opening index [ommited]/2021SP8761_9657_XIAOMI_REDMI_NOTE_8PRO_9664_MOPTICA/iped/./indexador/index 2021-10-18 11:21:45 [INFO] [indexer.util.ConfiguredFSDirectory] Using MMapDirectory to open index... 2021-10-18 11:21:46 [INFO] [application.connection.LocalOfficeConnection] Opening local OpenOffice.org connection. 2021-10-18 11:21:48 [INFO] [indexer.search.IPEDSource] Index opened 2021-10-18 11:21:48 [INFO] [indexer.search.IPEDSource] Creating LuceneId to ID mapping... java.lang.NoClassDefFoundError: com/sun/star/frame/XDesktop at ag.ion.bion.officelayer.internal.application.AbstractOfficeApplication.getDesktopService(AbstractOfficeApplication.java:214) at dpf.sp.gpinf.indexer.ui.fileViewer.frames.LibreOfficeViewer.startLO(LibreOfficeViewer.java:219) at dpf.sp.gpinf.indexer.ui.fileViewer.frames.LibreOfficeViewer.init(LibreOfficeViewer.java:165) at dpf.sp.gpinf.indexer.desktop.ViewerController$2.run(ViewerController.java:117) Caused by: java.lang.ClassNotFoundException: com.sun.star.frame.XDesktop at dpf.sp.gpinf.indexer.util.CustomLoader$CustomURLClassLoader.findClass(CustomLoader.java:126) at java.lang.ClassLoader.loadClass(ClassLoader.java:424) at dpf.sp.gpinf.indexer.util.CustomLoader$CustomURLClassLoader.loadClass(CustomLoader.java:136) at java.lang.ClassLoader.loadClass(ClassLoader.java:357) ... 4 more 2021-10-18 11:21:48 [INFO] [indexer.search.Marcadores] Loading state from file [ommited]/2021SP8761_9657_XIAOMI_REDMI_NOTE_8PRO_9664_MOPTICA/iped/indexador/marcadores.iped 2021-10-18 11:21:48 [INFO] [indexer.search.IPEDMultiSource] Opening MultiReader... 2021-10-18 11:21:48 [INFO] [indexer.search.IPEDMultiSource] MultiReader opened 2021-10-18 11:21:48 [INFO] [indexer.search.IPEDMultiSource] Loaded 1 cases. 2021-10-18 11:21:48 [INFO] [indexer.desktop.InicializarBusca] Loading Columns 2021-10-18 11:21:48 [INFO] [indexer.desktop.ColumnsManager] Loading default columns 2021-10-18 11:21:48 [INFO] [labld.graph.GraphServiceImpl] Starting neo4j service at [ommited]/2021SP8761_9657_XIAOMI_REDMI_NOTE_8PRO_9664_MOPTICA/iped/./indexador/neo4j/databases 2021-10-18 11:21:49 [INFO] [indexer.desktop.InicializarBusca] Listing all items 2021-10-18 11:21:49 [INFO] [indexer.desktop.FileProcessor] Opening [ommited]/2021SP8761_9657_XIAOMI_REDMI_NOTE_8PRO_9664_MOPTICA/iped/./indexador/htm/Ajuda.htm 2021-10-18 11:21:49 [INFO] [indexer.desktop.InicializarBusca] Listing all items Finished 2021-10-18 11:21:49 [INFO] [indexer.desktop.PesquisarIndice] Searching for query : 2021-10-18 11:21:49 [INFO] [network.util.ProxySever] No Proxy 2021-10-18 11:21:54 [INFO] [graph.desktop.LoadGraphDatabaseWorker] Init graph database took 5s 2021-10-18 11:21:54 [INFO] [indexer.desktop.PesquisarIndice] Searching for query : 2021-10-18 11:21:54 [INFO] [indexer.desktop.PesquisarIndice] Filtering for bookmarks "Interesse" 2021-10-18 11:22:00 [INFO] [indexer.desktop.FileProcessor] Opening sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0128.mp4 2021-10-18 11:22:03 [INFO] [graph.desktop.AppGraphAnalytics$ShowMoreConnectedNode] Query 3 most connected nodes took 8s 2021-10-18 11:22:03 [INFO] [graph.desktop.AppGraphAnalytics$ShowMoreConnectedNode] Expand node 546 took 0s 2021-10-18 11:22:03 [INFO] [graph.desktop.AppGraphAnalytics$ShowMoreConnectedNode] Expand node 547 took 0s 2021-10-18 11:22:03 [INFO] [graph.desktop.AppGraphAnalytics$ShowMoreConnectedNode] Expand node 0 took 0s 2021-10-18 11:22:22 [INFO] [indexer.desktop.CopiarArquivos] Exporting files to [ommited]/2021SP8761_9657_XIAOMI_REDMI_NOTE_8PRO_9664_MOPTICA/Compare 2021-10-18 11:22:22 [INFO] [indexer.desktop.CopiarArquivos] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/VID-20210423-WA0226.mp4 2021-10-18 11:22:22 [INFO] [indexer.desktop.CopiarArquivos] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0122.mp4 2021-10-18 11:22:22 [INFO] [indexer.desktop.CopiarArquivos] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0125.mp4 2021-10-18 11:22:22 [INFO] [indexer.desktop.CopiarArquivos] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0124.mp4 2021-10-18 11:22:22 [INFO] [indexer.desktop.CopiarArquivos] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210423-WA0111.mp4 2021-10-18 11:22:22 [INFO] [indexer.desktop.CopiarArquivos] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0130.mp4 2021-10-18 11:22:22 [INFO] [indexer.desktop.CopiarArquivos] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0121.mp4 2021-10-18 11:22:22 [INFO] [indexer.desktop.CopiarArquivos] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210423-WA0112.mp4 2021-10-18 11:22:23 [INFO] [indexer.desktop.CopiarArquivos] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0128.mp4 2021-10-18 11:22:23 [INFO] [indexer.desktop.CopiarArquivos] Exporting file sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0123.mp4 2021-10-18 12:02:43 [INFO] [indexer.desktop.FileProcessor] Opening sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0123.mp4 2021-10-18 12:03:23 [INFO] [indexer.desktop.FileProcessor] Opening sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0130.mp4 2021-10-18 12:03:57 [INFO] [indexer.desktop.FileProcessor] Opening sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210423-WA0112.mp4 2021-10-18 12:04:27 [INFO] [indexer.desktop.FileProcessor] Opening sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0125.mp4 2021-10-18 12:04:51 [INFO] [indexer.desktop.FileProcessor] Opening sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0124.mp4 2021-10-18 12:07:43 [INFO] [indexer.desktop.FileProcessor] Opening sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210423-WA0111.mp4 2021-10-18 12:11:59 [INFO] [indexer.desktop.FileProcessor] Opening sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0121.mp4 2021-10-18 12:12:25 [INFO] [indexer.desktop.FileProcessor] Opening sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0122.mp4 2021-10-18 12:12:43 [INFO] [indexer.desktop.FileProcessor] Opening sdcard/WhatsApp/Media/WhatsApp Video/Sent/VID-20210421-WA0128.mp4 2021-10-18 12:13:09 [INFO] [indexer.desktop.FileProcessor] Opening sdcard/WhatsApp/Media/WhatsApp Video/VID-20210423-WA0226.mp4 2021-10-18 12:14:05 [INFO] [indexer.desktop.PesquisarIndice] Searching for query +(categoria:imagens categoria:outras imagens) +: 2021-10-18 12:14:05 [INFO] [indexer.desktop.PesquisarIndice] Filtering for bookmarks "Interesse"

Am Mi., 20. Okt. 2021 um 11:22 Uhr schrieb Luis Nassif < @.***>:

Have you tried the 3.18.8 version? Maybe this change is related: https://github.com/sepinf-inc/IPED/blob/master/ReleaseNotes.txt#L110

How did you configure the case on Linux? To automatically export files from evidence, editing the CategoriesToExport.txt config? Providing the used profile and the processing log on Linux would help to reproduce and confirm this.

I mean the UI export files feature

So please also provide the IPED-SearchApp.log GUI log file.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/sepinf-inc/IPED/issues/785#issuecomment-947717307, or unsubscribe https://github.com/notifications/unsubscribe-auth/AFVAK4TDLG7PWKWTZ4EOUDDUH3GB3ANCNFSM5GJPCTJQ .

-- A.M

lfcnassif commented 3 years ago

I wasn't able to reproduce your issue at first, processed a case on Linux, opened on Windows and successfully exported files.

As you didn't provide all asked info (log files and answers to questions), I had to guess information about your environment, like input and output folders and location of them on both systems. All that info would be found in log files...

So I think I reproduced a similar issue to yours (not sure as there is info missing here), but it is present in previous versions. Maybe it happened to you in a specific input/output folder configuration, not related to 3.18.9 release.

Please test this snapshot and let me know if it fixes your problem: https://github.com/sepinf-inc/IPED/actions/runs/1365646500

lfcnassif commented 3 years ago

Did the fix/snapshot solve your issue?

lfcnassif commented 3 years ago

@kraftdenker please verify if the patch fixes your issue on your environment when possible, I'm just waiting your feedback to integrate the proposed fix into main and 3.18.x branches.

kraftdenker commented 3 years ago

Ok. Sorry, i ve been too busy. I ll test it asap and return you about.

kraftdenker commented 3 years ago

I've just tested, but it cant start processing. I've used the same LocalConfig.txt that I've used with v. 3.18.9. Im getting the following exception: Error: A JNI error has occurred, please check your installation and try again Exception in thread "main" java.lang.NoClassDefFoundError: dpf/sp/gpinf/indexer/util/IPEDException at java.lang.Class.getDeclaredMethods0(Native Method) at java.lang.Class.privateGetDeclaredMethods(Class.java:2701) at java.lang.Class.privateGetMethodRecursive(Class.java:3048) at java.lang.Class.getMethod0(Class.java:3018) at java.lang.Class.getMethod(Class.java:1784) at sun.launcher.LauncherHelper.validateMainClass(LauncherHelper.java:544) at sun.launcher.LauncherHelper.checkAndLoadMain(LauncherHelper.java:526) Caused by: java.lang.ClassNotFoundException: dpf.sp.gpinf.indexer.util.IPEDException at java.net.URLClassLoader.findClass(URLClassLoader.java:382) at java.lang.ClassLoader.loadClass(ClassLoader.java:424) at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:349) at java.lang.ClassLoader.loadClass(ClassLoader.java:357) ... 7 more

lfcnassif commented 3 years ago

Sorry, there is some issue with the remote CI builds producing not usable builds. Could you try to build and test this branch https://github.com/sepinf-inc/IPED/tree/%23785_fix locally?

lfcnassif commented 3 years ago

I've just built that branch to help you testing. Just replace the compressed attached jar in 3.18.9 lib folder and please check if it works. I think it should work with an already processed case. iped-engine-3.18.9.jar.zip

kraftdenker commented 3 years ago

I've tested with SUCCESS today. The jarlib was replaced with that one you provided. The exports process worked after selecting the right windows-like path to the data source after selecting the item. Thanx 4 all effort. 👍

Am Fr., 29. Okt. 2021 um 20:40 Uhr schrieb Luis Nassif < @.***>:

I've just built that branch to help you testing. Just replace the compressed attached jar in 3.18.9 lib folder and please check if it works. I think it should work with an already processed case. iped-engine-3.18.9.jar.zip https://github.com/sepinf-inc/IPED/files/7445389/iped-engine-3.18.9.jar.zip

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/sepinf-inc/IPED/issues/785#issuecomment-955102201, or unsubscribe https://github.com/notifications/unsubscribe-auth/AFVAK4UUB4EBO2NPKSBMLHTUJMWHVANCNFSM5GJPCTJQ .

-- A.M

lfcnassif commented 3 years ago

Thanks @kraftdenker for testing!