Mike - thanks so much for replying<div><br></div><div>***************************************************************************************************</div><div>This is the terminal output for the lipo commands:</div><div>

<br></div><div><div>qbl-mbp:~ qubyte$ lipo -info /usr/local/lib/libewf.dylib</div><div>Non-fat file: /usr/local/lib/libewf.dylib is architecture: x86_64</div><div>qbl-mbp:~ qubyte$ lipo -info `which python`</div><div>Architectures in the fat file: /Library/Frameworks/Python.framework/Versions/2.6/bin/python are: ppc i386 </div>

<div><br></div><div>***************************************************************************************************</div><div><br></div><div>Output from from the versioner command:</div><div><br></div><div><div>qbl-mbp:volatility2.0 qubyte$  VERSIONER_PYTHON_PREFER_32_BIT=yes python vol.py -h</div>

<div>Volatile Systems Volatility Framework 2.0</div><div>*** Failed to import volatility.plugins.addrspaces.ewf (OSError: dlopen(/usr/local/lib/libewf.dylib, 6): no suitable image found.  Did find:</div><div><span class="Apple-tab-span" style="white-space:pre">	</span>/usr/local/lib/libewf.dylib: mach-o, but wrong architecture)</div>

</div><div><br></div><div>I have also cc&#39;d Joachim Metz on this in case he has some insight.  Joachim - in case you have time to read this i am encountering this error with libewf and volatility 2.0 when running volatitlity (mac ox 10.6.8 with libewf 20100226; this version of libewf is used to due to TSK 3.2.2):</div>

<div><br></div><div><div>*** Failed to import volatility.plugins.addrspaces.ewf (OSError: dlopen(/usr/local/lib/libewf.dylib, 6): no suitable image found.  Did find:</div><div><span class="Apple-tab-span" style="white-space: pre; ">	</span>/usr/local/lib/libewf.dylib: mach-o, but wrong architecture)</div>

</div><div><br></div><div><br></div><div>Thanks to the vol group and joachim for taking the time to read this!  I look forward to the next set of ideas! :)</div><div><br></div><div>Cheers</div><div><br></div><div>Shafik</div>

<div class="gmail_quote">On Tue, Aug 9, 2011 at 11:00 AM,  <span dir="ltr">&lt;<a href="mailto:vol-users-request@volatilityfoundation.org">vol-users-request@volatilityfoundation.org</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">

lipo -info `which python`</blockquote></div><br></div>