Re: [Vol-users] Volatility install on OS X Lion

Hey all, So I went through the install docs for Linux on the wiki to install Volatility on my MacBook Pro running OS X Lion.  I'm testing it using the samples from the Malware Cookbook (stuxnet.vmem in this case), and just doing: python ~/volatility-read-only/vol.py -f stuxnet.vmem imageinfo I'm getting the following output: Volatile Systems Volatility Framework 2.1_alpha Determining profile based on KDBG search... Traceback (most recent call last):  File "/Users/e18529/volatility-read-only/vol.py", line 135, in <module>    main()  File "/Users/e18529/volatility-read-only/vol.py", line 126, in main    command.execute()  File "/Users/e18529/volatility-read-only/volatility/commands.py", line 101, in execute    func(outfd, data)  File "/Users/e18529/volatility-read-only/volatility/plugins/imageinfo.py", line 37, in render_text    for k, v in data:  File "/Users/e18529/volatility-read-only/volatility/plugins/imageinfo.py", line 47, in calculate    suglist = [ s for s, _, _ in kdbg.KDBGScan.calculate(self)]  File "/Users/e18529/volatility-read-only/volatility/plugins/kdbgscan.py", line 95, in calculate    buf = addrspace.BufferAddressSpace(self._config)  File "/Users/e18529/volatility-read-only/volatility/addrspace.py", line 161, in __init__    BaseAddressSpace.__init__(self, None, config, **kwargs)  File "/Users/e18529/volatility-read-only/volatility/addrspace.py", line 68, in __init__    self.profile = self._set_profile(config.PROFILE)  File "/Users/e18529/volatility-read-only/volatility/addrspace.py", line 90, in _set_profile    ret = registry.PROFILES[profile_name]()  File "/Users/e18529/volatility-read-only/volatility/obj.py", line 879, in __init__    self.reset()  File "/Users/e18529/volatility-read-only/volatility/obj.py", line 906, in reset    self.load_modifications()  File "/Users/e18529/volatility-read-only/volatility/obj.py", line 960, in load_modifications    mod.modification(self)  File "/Users/e18529/volatility-read-only/volatility/plugins/overlays/windows/ssdt_vtypes.py", line 57, in modification    profile.additional['syscalls'] = module.syscalls AttributeError: 'NoneType' object has no attribute 'syscalls' So I'm guessing I still don't have something configured correctly. Thanks ahead of time, Tom _______________________________________________ Vol-users mailing list Vol-users(a)volatilityfoundation.org http://lists.volatilityfoundation.org/mailman/listinfo/vol-users