Hello List! I have been fighting with this issue since volatility 1.4 RC1. I am not able to figure out why it cannot locate the correct libewf library. I have uninstalled and reinstalled from source the libewf 20100226 stable version. Can anyone assist me with this Terminal output: qbl-mbp:volatility2.0 qubyte$ python vol.py -h Volatile Systems Volatility Framework 2.0 *** Failed to import volatility.plugins.addrspaces.ewf (OSError: dlopen(/usr/local/lib/libewf.dylib, 6): no suitable image found. Did find: /usr/local/lib/libewf.dylib: mach-o, but wrong architecture) Usage: Volatility - A memory forensics analysis platform. OS: Mac OS X 10.6.8 Python: qbl-mbp:~ qubyte$ python Python 2.6.6 (r266:84374, Aug 31 2010, 11:00:51) [GCC 4.0.1 (Apple Inc. build 5493)] on darwin Type "help", "copyright", "credits" or "license" for more information. Any help would be greatly appreciated...and please dont assume that I know my well around terminal shell..I am still a newbie and learning lots! Thanks! Shafik __________________________________ Shafik Punja BSc, A+, CISSP, Network+, ACE, CCE Senior Technical Officer *QuByte Logic Ltd* 612-500 Country Hills Blvd NE, Suite #404 Calgary, AB CANADA T3K 5K3 ph: 403.909.6120 em: shafghp(a)gmail.com or shafik(a)qubytelogic.com wp: http://www.qubytelogic.com