Re: [Vol-dev] Possible Volatility Bug

Hiya John, First off could you please specify which version of volatility you're using (whether you're using a tarball, or the sources from subversion)? Also, whilst I can't comment too well on the 1.3 branch, I don't think Windows 2003 is supported, I believe it's mostly aimed at XP SP2. Having said that, it is possible to manually specify a DTB in the 1.4 branch using --dtb and in the 1.3 branch using -b (although for 1.3 this is probably plugin dependent). I'll leave it to someone who's been working with Volatility longer to give you a more in-depth answer once you let us know which version you were using, but hopefully this'll let you work around the problem for a bit... 5:) Mike 5:)