Simson L. Garfinkel

@erik4711 - another issue with the memdump.mem.pcapng file you sent: it appears to be much larger than can be explained by the packets it contains: ``` slg@lastdance ~ % ls...

Hm. Let me try another tcpdump... ``` (base) simsong@Seasons ~ % tcpdump --version tcpdump version 4.9.3 -- Apple version 114.100.1 libpcap version 1.9.1 LibreSSL 3.3.5 (base) simsong@Seasons ~ % which...

Ugh. Okay. Meanwhile, I've determined that I'm going to have to carve packets that don't have valid checksums.

Thanks. This looks like a problem with the MAIN branch. I will review.

Looks like a problem with the url for libewf… ---- Sent from my phone. On Jan 26, 2022, at 3:31 AM, Unallocated Space ***@***.***> wrote:  Hello. I'm in the...

@joachimmetz - do we want to use the experimental, or should we go back to the released version?

This is the production version. Seems like we should update it to use https://github.com/libyal/libewf-legacy/releases/download/20140812/libewf-20140812.tar.gz. Do you think that the 2014 version will remain production for another few years, or is...

This was not clear to me! I'm glad we are not using code from 2014, just an API from 2014. We should use https://github.com/libyal/libewf-legacy/releases/download/20140812/libewf-20140812.tar.gz.

I have seen the `./configure: line 6780: 0:` bug before but I am able to get make install working. Can you post full input and output on a clean VM?...

Oh, wait. I've seen this before. It looks like the version of autoconf you are using isn't getting upgraded to autoconf-2.71. Can you try running the script in a different...