Re: [Vol-users] Difficulty creating CentOS profiles
6 Feb
2014
6 Feb
'14
10:32 a.m.
Hello,
I believe you are having the same issues that we diagnosed here:
http://lists.volatilityfoundation.org/pipermail/vol-users/2013-February/000…
Could you please edit your code as MHL explains to account for the
shift? It only requires two small changes to the existing code. Note
that the line numbers may be different since the code has been update
since then but if you search for the 0xffffffff80000000 number in each
file you will be able to find it.
Also we would recommend acquiring in the lime format "format=lime"
instead of acquiring in the raw one.
Let me know how it goes.
Thanks,
Andrew (@attrc)
On 2/5/2014 5:26 PM, Torres, Geoff (Global Cyber Security) wrote:
Hi,
I’ve been unable to create a working Linux profile for any version of
CentOS. It compiles fine but gives a ‘No suitable address space mapping
found’ error when ran against the memory image.
I’ve been successful creating various Debian and Ubuntu profiles, but
CentOS has yet to work. I’m sure it’s something simple but I can’t
figure it out. I’m certain that I’m matching kernel versions correctly
and that the build process is the same as I use for the Ubuntu versions.
I’ve attached the details of my most recent attempt. It’s a vanilla
CentOS 5.10 install on VmWare. The memory image is available (250Mb
zip) if necessary.
Any ideas? None of the solutions I found in Google seem to address my
issue.
Thanks,
Geoff
BTW – I’m not a kernel programmer so please be detailed if there’s
something you’d like me to try.
_______________________________________________
Vol-users mailing list
Vol-users(a)volatilityfoundation.org
http://lists.volatilityfoundation.org/mailman/listinfo/vol-users