You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
ubuntu@siftworkstation -> ~
$ sudo vol.py --profile=Linux4_14_62-65_117_amzn1_x86_64x64 -f 54.85.216.218-mem.lime linux_banner
Volatility Foundation Volatility Framework 2.6
Traceback (most recent call last):
File "/usr/bin/vol.py", line 192, in <module>
main()
File "/usr/bin/vol.py", line 183, in main
command.execute()
File "/usr/lib/python2.7/dist-packages/volatility/plugins/linux/common.py", line 64, in execute
commands.Command.execute(self, *args, **kwargs)
File "/usr/lib/python2.7/dist-packages/volatility/commands.py", line 116, in execute
if not self.is_valid_profile(profs[self._config.PROFILE]()):
File "/usr/lib/python2.7/dist-packages/volatility/plugins/overlays/linux/linux.py", line 216, in __init__
obj.Profile.__init__(self, *args, **kwargs)
File "/usr/lib/python2.7/dist-packages/volatility/obj.py", line 862, in __init__
self.reset()
File "/usr/lib/python2.7/dist-packages/volatility/plugins/overlays/linux/linux.py", line 227, in reset
self.load_vtypes()
File "/usr/lib/python2.7/dist-packages/volatility/plugins/overlays/linux/linux.py", line 264, in load_vtypes
vtypesvar = dwarf.DWARFParser(dwarfdata).finalize()
File "/usr/lib/python2.7/dist-packages/volatility/dwarf.py", line 71, in __init__
self.feed_line(line)
File "/usr/lib/python2.7/dist-packages/volatility/dwarf.py", line 162, in feed_line
self.process_statement(**parsed) #pylint: disable-msg=W0142
File "/usr/lib/python2.7/dist-packages/volatility/dwarf.py", line 204, in process_statement
self.vtypes[name] = [ int(data['DW_AT_byte_size'], self.base), {} ]
KeyError: 'DW_AT_byte_size'
ubuntu@siftworkstation -> ~
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
Ran the following command:
Researching it, I found:
volatilityfoundation/volatility#335
Updated SIFT with latest Volatility, and life is good:
The text was updated successfully, but these errors were encountered: