I know 1.3 is Beta, but is there any reason setup.py references "memory_objects.Linux" when it's not in the distribution? I'm packaging this for my own purposes, and used the attached patch to greatly minimize the amount of work I had to do for installation. Now, I can use 'python setup.py install' and everything goes where one would expect them to. For system-wide installation purposes, it'd be even nicer if volatility carved out its own namespace/hierarchy (i.e. 'volatility.forensics', 'volatility.vmodules') so as to lessen chance of collision with other packages, but know that would likely end up making an API change forcing plugin authors to accomodate. RB