libesedb 2012 alpha version

[morgan13z]

Hello,

Could you please give us more details about the Build procedure ?

libesedb 2012 alpha version [1] https://bitbucket.org/iwseclabs/bta/downloads/libesedb-alpha-20120102.tar.gz Build it. Install it or have LD_LIBRARY_PATH point to it when using btaimport

btaimport -C ::mydb ntds.dit

ERROR: libesedb.so: cannot open shared object file: No such file or directory. Did you install it or did you use LD_LIBRARY_PATH correctly ?

Regards,

Morgan

[Greg_Lucand]

Hi,

Check that libesedb.so is in the library cache with the following command: ldconfig -p | grep libesedb

If not, check that libesedb.so is present in /usr/local/lib/ and if so, do: sudo ldconfig /usr/local/lib

You can check the following link : https://github.com/libyal/libesedb/wiki/Building#using-gnu-compiler-collection-gcc

Regards,

Greg

[morgan13z]

Hi Greg and thank you for your help.

I tried : ldconfig -p | grep libesedb but no return

I checked and libesedb.so is present in /usr/local/lib/ so I did sudo ldconfig /usr/local/lib

Now when I do the following command : ldconfig -p | grep libesedb I got this return : libesedb.so.1 (libc6,x86-64) => /usr/local/lib/libesedb.so.1 libesedb.so (libc6,x86-64) => /usr/local/lib/libesedb.so

# btaimport -C ::mydb ntds.dit

INFO : Going to import ::mydb <- ntds.dit INFO : Opening [ntds.dit] Traceback (most recent call last): File "/usr/local/bin/btaimport", line 7, in <module> bta.ntds2db.main() File "/usr/local/lib/python2.7/dist-packages/bta/ntds2db.py", line 361, in main map(import_file, jobs) File "/usr/local/lib/python2.7/dist-packages/bta/ntds2db.py", line 248, in import_file options.esedb = libesedb.ESEDB(fname, ignore_errors=options.ignore_import_errors, report_error=options.dblog.update_entry) File "/usr/local/lib/python2.7/dist-packages/libesedb/libesedb.py", line 151, in init self.lib = LibESEDB(ignore_errors=ignore_errors, report_error=report_error) File "/usr/local/lib/python2.7/dist-packages/libesedb/libesedb.py", line 29, in init self.lib = cdll.LoadLibrary("libesedb.so") File "/usr/lib/python2.7/ctypes/init.py", line 440, in LoadLibrary return self._dlltype(name) File "/usr/lib/python2.7/ctypes/init.py", line 362, in init self._handle = _dlopen(self._name, mode) OSError: /usr/local/lib/libesedb.so: undefined symbol: libuna_unicode_character_copy_from_utf8

Something is missing somewhere ?

Regards,

Morgan

[morgan13z]

Problem solved.

Ona brand new installation Ubuntu 16.04.3 LTS

apt-get install mongodb-server apt-get install python-dev wget https://bitbucket.org/iwseclabs/bta/downloads/libesedb-alpha-20120102.tar.gz tar -xzvf libesedb-alpha-20120102.tar.gz cd libesedb-20120102/ apt-get install gcc apt-get install make CFLAGS="-g -O2 -Wall -fgnu89-inline" ./configure --enable-static-executables make make install apt-get install python-pip pip install bta

btaimport -C ::mydb ntds.dit

Importation of datatable is done.

Maybe it'll help others.

Regards,

Morgan