Package: python3-plaso
Version: 20190131-3
Severity: grave
Justification: tools fail to start
image_export.py and log2timeline.py always exits with the error message
ERROR: Unable to determine location of data files.
even with just passing --info (to log2timeline.py) as option.
Full output from Debian Testing and Kali Linux before the switch from
Python 3.8 to 3.9 (which throws a lot of Python warnings which I will
report separately):
$ log2timeline.py --info
ERROR: Unable to determine location of data files.
usage: log2timeline.py [-h] [-V] [--artifact_definitions PATH]
[--custom_artifact_definitions PATH] [--data PATH]
[--artifact_filters ARTIFACT_FILTERS]
[--artifact_filters_file PATH] [--preferred_year YEAR]
[--process_archives] [--skip_compressed_streams]
[-f FILE_FILTER] [--hasher_file_size_limit SIZE]
[--hashers HASHER_LIST] [--parsers PARSER_LIST]
[--yara_rules PATH] [--partitions PARTITIONS]
[--volumes VOLUMES] [-z TIMEZONE] [--no_vss]
[--vss_only] [--vss_stores VSS_STORES]
[--credential TYPE:DATA] [-d] [-q] [--info]
[--use_markdown] [--no_dependencies_check]
[--logfile FILENAME] [--status_view TYPE] [-t TEXT]
[--buffer_size BUFFER_SIZE] [--queue_size QUEUE_SIZE]
[--single_process] [--process_memory_limit SIZE]
[--temporary_directory DIRECTORY]
[--worker_memory_limit SIZE] [--workers WORKERS]
[--disable_zeromq] [--sigsegv_handler]
[--profilers PROFILERS_LIST]
[--profiling_directory DIRECTORY]
[--profiling_sample_rate SAMPLE_RATE]
[--storage_format FORMAT]
[STORAGE_FILE] [SOURCE]
$ image_export.py foo
ERROR: Unable to determine location of data files.
usage: image_export.py [-h] [-V] [-d] [-q] [--artifact_definitions PATH]
[--custom_artifact_definitions PATH] [--data PATH]
[--process_memory_limit SIZE]
[--logfile FILENAME] [--partitions PARTITIONS]
[--volumes VOLUMES] [--no_vss]
[--vss_only] [--vss_stores VSS_STORES]
[--artifact_filters ARTIFACT_FILTERS]
[--artifact_filters_file PATH] [--date-filter
TYPE_START_END] [-f FILE_FILTER]
[-x EXTENSIONS] [--names NAMES] [--signatures
IDENTIFIERS] [-w PATH]
[--include_duplicates]
[IMAGE]
$
According to strace it looks in these directories which are all
non-existing on my system:
stat("/usr/lib/python3/dist-packages/share/plaso", 0x7ffc932a7200) = -1 ENOENT
(No such file or directory)
stat("/usr/lib/python3/dist-packages/data", 0x7ffc932a7200) = -1 ENOENT (No
such file or directory)
stat("/usr/share/plaso", 0x7ffc932a7200) = -1 ENOENT (No such file or directory)
stat("/usr/local/share/plaso", 0x7ffc932a7200) = -1 ENOENT (No such file or
directory)
ERROR: Unable to determine location of data files.
Seems as if either …
* the correct directory is not searched for,
* the files are missing from the package, or
* a package dependency is missing.
-- System Information:
Debian Release: bullseye/sid
APT prefers unstable
APT policy: (990, 'unstable'), (600, 'testing'), (500, 'unstable-debug'),
(500, 'buildd-unstable'), (110, 'experimental'), (1, 'experimental-debug'), (1,
'buildd-experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 5.9.0-4-amd64 (SMP w/4 CPU threads)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled
Versions of packages python3-plaso depends on:
ii python3 3.9.0-4
ii python3-artifacts 20190320-3
ii python3-biplist 1.0.3-2
ii python3-certifi 2020.6.20-1
ii python3-chardet 3.0.4-7
ii python3-crypto 2.6.1-13.1+b3
ii python3-dateutil 2.8.1-4
ii python3-dfdatetime 20200824-1
ii python3-dfvfs 20190128-2.1
ii python3-dfwinreg 20190122-1.1
ii python3-dtfabric 20200621-1
ii python3-efilter 1.5-2.1
ii python3-elasticsearch 7.1.0-3
ii python3-fsapfs 20201107-1
ii python3-future 0.18.2-4
ii python3-idna 2.10-1
ii python3-libbde 20190102-1.1+b2
ii python3-libesedb 20181229-3.1+b2
ii python3-libevt 20181227-1.1+b2
ii python3-libevtx 20181227-1.1+b2
ii python3-libewf 20140807-2+b2
ii python3-libfsntfs 20200921-1+b1
ii python3-libfvde 20190104-1.1+b2
ii python3-libfwnt 20181227-1.1+b2
ii python3-libfwsi 20181227-1.1+b2
ii python3-liblnk 20181227-1.1+b2
ii python3-libmsiecf 20181227-1.1+b2
ii python3-libolecf 20181231-1.1+b2
ii python3-libqcow 20181227-1.1+b2
ii python3-libregf 20201007-1
ii python3-libscca 20181227-1.1+b2
ii python3-libsigscan 20201117-1
ii python3-libsmdev 20190315-1.1+b2
ii python3-libsmraw 20181227-1.1+b2
ii python3-libvhdi 20181227-1.1+b2
ii python3-libvmdk 20200926-1+b1
ii python3-libvshadow 20190323-1.1+b2
ii python3-libvslvm 20181227-1.1+b2
ii python3-lz4 3.1.1+dfsg-1+b1
ii python3-pefile 2019.4.18-1.1
ii python3-psutil 5.7.3-1+b2
ii python3-pyparsing 2.4.7-1
ii python3-requests 2.24.0+dfsg-1
ii python3-six 1.15.0-2
ii python3-tsk 20200117-2+b2
ii python3-tz 2020.4-2
ii python3-urllib3 1.25.11-1
ii python3-xlsxwriter 1.1.2-0.2
ii python3-yaml 5.3.1-3+b1
ii python3-yara 4.0.2-1+b2
ii python3-zmq 20.0.0-1+b1
python3-plaso recommends no packages.
python3-plaso suggests no packages.
-- no debconf information
