Simson L. Garfinkel

Huh. How about that. Big question: is there are lot of hex-encoded data out there? That's the real question.

I concur.

> Lightgrep is now hosted here on Github: https://github.com/strozfriedberg/lightgrep > > I'll push a new release in the next few weeks and then work at changing the dev-2 branch to...

Thanks for looking at that. That's a bug! I didn't have _any_ search terms, so `scan_find` shouldn't be running. I was thinking of ways to speeding up `scan_aes`. One idea...

Gen3

Confirmed, BE16 has the same problem: ``` (base) simsong@nimi src % ls -l out-be16-rar/jpeg_carved/000 (slg-dev)bulk_extractor total 8 -rw-r--r-- 1 simsong staff 7599 Aug 23 06:00 13259-RAR-0.jpg ```

36e4c65 achieves this objective. bulk_diff output: ``` (base) simsong@nimi src % python ../python/bulk_diff.py ~/corp/nps-2010-emails/report_be16 nps-2010-emails_out3 (slg-dev)bulk_extractor Files only in /Users/simsong/corp/nps-2010-emails/report_be16: wordlist_split_000.txt (4330 lines) Files only in nps-2010-emails_out3: tcp_histogram.txt (0 lines)...

Ick. Can you push a patch? > On Sep 13, 2016, at 5:18 PM, Jon Stewart [email protected] wrote: > > It looks like the pos0 attribute in debug:exception elements in...

in phase1.cpp: ``` (base) simsong@nimi bulk_extractor % grep 'debug:exception' src/phase1.cpp (slg-dev)bulk_extractor xreport.xmlout("debug:exception", e.what(), str.str(), true); xreport.xmlout("debug:exception", e.what(), sstr.str(), true); ```

@jonstewart - are you still working on this?