Re: [Vol-users] Minor issue running volatility 2.0 on Mac OX 10.6.8 (Intel)

Hi there, Since libewf is going to be loaded up by python, you need to make sure that the python architecture and the libewf architecture match. You should be able to find out which architecture these things are built with as follows: $ lipo -info /usr/local/lib/libewf.dylib $ lipo -info `which python` I suspect that they won't match, which I think will be because the mac-os installed python runs in 64-bit mode by default. The easiest option available for you is to run python with the following environment variable set (so as follows): $ VERSIONER_PYTHON_PREFER_32_BIT=yes python vol.py -h Note that this environment variable only works for the Mac supplied version of python, not for any that you may build yourself, or get from python.org. If that doesn't work, then you can try recompiling libewf for the correct architecture, but since I don't use/have/own a mac I don't think I'll be able to talk you through the changes very effectively. Do please write back with the results of the lipo commands, since someone else may be able to provide you a bit more help... Thanks, Mike 5:)