search

volatilityfoundation / profiles

Volatility profiles for Linux and Mac OS X
318 stars 100 forks source link

Ubuntu Profile LinuxUbuntu1404x64 Not working #24

Closed BryanSingh closed 7 years ago

BryanSingh commented 8 years ago

When I create a .raw file from a .dmp, I run:

python vol.py -f ubuntu1404dmpconverted.raw --profile=LinuxUbuntu1404x64 pslist

I get

Volatility Foundation Volatility Framework 2.5 ERROR : volatility.debug : This command does not support the profile LinuxUbuntu1404x64

No command works for this profile.

npetroni commented 8 years ago

Hi,

Thanks for the question.

Do you literally mean pslist? If so, that is a Windows command. Try linux_pslist instead. You might try python vol.py --info | grep linux_ to see the Linux commands for Volatility. Also, there is a bit of information here: https://github.com/volatilityfoundation/volatility/wiki/Linux.

Please let me know if that helps or if there are still issues.

Thanks

gleeda commented 7 years ago

Closing out since this is most likely just the incorrect plugin. Feel free to reopen if the issue persists.