Below the instructions how to set up a build environment on Linux:
Note that if sections are marked as WIP it means they are work in progress.
To check if you have all the dependencies installed you can run:
The SIFT apt repo contains all the packages needed to build the tool, and the tool itself. To add the SIFT repo, use the command:
Or to use the dev (or development) branch:
The difference between these two is that "stable" contains the last release of the code and should therefore be more stable while the dev branch contains the latest trunk, or at least close to it.
An alternative repository if you do not want all the additional packages that SIFT provides you with while still following the trunk:
Then to install plaso do:
For development purposes use the dev branch of the SIFT repo or the alternative repo and instead of installing the "python-plaso" package use:
Install the packages mentioned in the "Depends" and then use git to fetch the latest code.
Note that the update dependencies script is currently still work in progress.
Below the instructions how to set up a build environment on Unbuntu 14.04 using the build_dependencies script.
First of all make sure your installation is up to date:
Get a copy of the plaso source:
Make sure the necessary building tools and development packages are installed on the system:
To build most of the dependencies automatically run the build dependency script:
Note that the build dependencies script is currently still work in progress, but it will build most of the dependencies.
Get the latest dpkt version from: https://code.google.com/p/dpkt/
Currently there are multiple issues with dpkt one of which is: https://code.google.com/p/dpkt/issues/detail?id=34
Edit the file:
On line 252 change:
Note that the libyal libraries and Python-bindings also can be build in batch.
Tough you have to make sure you've set up your build system correctly first.
Get libyal-build.py from the libyal git repository:
Make sure the required libraries are in LIBYAL_LIBRARIES in libyal-build.py.
Then run libyal-build e.g. to build with rpmbuild and create rpm files:
You should end up with multiple rpm files inside the current directory.
More information regarding libyal-build can be found here.