Re: [Vol-users] Help to add new plugin

Try: sudo python vol.py --plugins=../jamaal-re-tools-f427978461d4/volplugins -f /mnt/hgfs/E/ENSE/F/M/Audits/7523/200309/memory.img --profile=Win7SP1x64 ethscan First: --plugins takes in either a directory or a zipfile, not a plugin Second: You didn't specify which plugin to run (ethscan) -----Original Message----- From: David <eterno.comandante(a)gmail.com> Date: Thu, 14 Nov 2013 10:41:47 To: Jamie Levy<jamie.levy(a)gmail.com> Cc: Volatility List<vol-users(a)volatilesystems.com> Subject: Re: [Vol-users] Help to add new plugin Sorry I had a typo i didn´t write --profile=Win7SP1x64 I have the same error of ever :( Thanks!! El 14/11/2013, a las 09:36, David <eterno.comandante(a)gmail.com> escribió: > Hi @Jamie and list > > Thanks very much for your support ;) > > I’ve same errors when i’m executing: :( > > sudo python vol.py --plugins=../jamaal-re-tools-f427978461d4/volplugins/ethscan.py -f /mnt/hgfs/E/ENSE/F/M/Audits/7523/200309/memory.img > > The error: > > > Maybe the cause of this error can be that the new plugin “ethscan" isn't compatible with non instalable version of volatility 2.3.1, what do you think about? > > On the other hand, i found a brief tutorial about ethscan: > > https://code.google.com/p/jamaal-re-tools/source/browse/volplugins/README.t… > > vol.py ethscan -f be2.vmem -R --dump-dir outputfiles -C out.pcap -P -S > > The execution of the vol.py command is different……. :( > > He does not the flag —-plugin= > > Thanks for all!! > > Ps: My apologies for my level of english > > > El 13/11/2013, a las 16:43, Jamie Levy <jamie.levy(a)gmail.com> escribió: > >> Hi David, >> >> I think you might have also asked this on the channel. So yes, you should use the `--plugins=/path/to/folder/with/ethscan` option, obviously changing the path to a folder that has that plugin. If you were the person on the channel, the issue that you were having is because you must specify `--plugins` first, BEFORE any other options to vol.py: >> >> http://code.google.com/p/volatility/wiki/VolatilityUsage23#Specifying_Addit… >> >> Let me know if you have any other questions. >> >> All the best, >> >> -gleeda >> >> >> >> >> On Tue, Nov 12, 2013 at 6:42 AM, David Martin <eterno.comandante(a)gmail.com> wrote: >> Hello list, >> >> Please, I need some help about for add/use new plugins in volatility 2.3.1. >> >> Can I use the flag "--plugins=contrib/plugins"? o is there any method? >> >> The plugin that I want for add/use is: >> >> https://code.google.com/p/jamaal-re-tools/source/checkout >> >> Thanks for your support!! >> >> >> >> >> >> _______________________________________________ >> Vol-users mailing list >> Vol-users(a)volatilesystems.com >> http://lists.volatilesystems.com/mailman/listinfo/vol-users >> >> >> >> >> -- >> PGP Fingerprint: 2E87 17A1 EC10 1E3E 11D3 64C2 196B 2AB5 27A4 AC92 >