The Sleuth Kit (TSK) is a library and collection of command line tools that
allow you to investigate volume and file system data. The library can be
incorporated into larger digital forensics tools and the command line tools
can be directly used to find evidence.
The media management tools allow you to examine the layout of disks and
other media. The Sleuth Kit supports DOS partitions, BSD partitions (disk
labels), Mac partitions, Sun slices (Volume Table of Contents), and GPT
disks. With these tools, you can identify where partitions are located and
extract them so that they can be analyzed with file system analysis tools.
===> The following configuration options are available for sleuthkit-4.12.1:
AFFLIB=off: Build with AFF support
DOCS=on: Build and/or install documentation
LIBEWF=on: Build with EWF support
LIBVHDI=on: Build with VHDI support
LIBVMDK=on: Build with VMDK support
===> Use 'make config' to modify these settings
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
sysutils: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* <jsmith@resonatingmedia.com>
* Aaron Dalton <aaron@FreeBSD.org>
* Aaron Landwehr <aaron@snaphat.com>
* Adam Weinberger <adamw@FreeBSD.org>
* Adrian Chadd
* Adrian Chadd <adrian@FreeBSD.org>
* Akinori MUSHA aka knu <knu@idaemons.org>
* Alan Eldridge <alane@FreeBSD.org>
* Alan Eldridge <alane@geeksrus.net>
* Aldis Berjoza <aldis@bsdroot.lv>
* Alex Deiter <alex.deiter@gmail.com>
(Only the first 15 lines of the commit message are shown above )
*/*: Remove redundant '-[0-9]*' from CONFLICTS
The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").
Many CONFLICTS definitions used patterns like "bash-[0-9]*" to filter
for the bash package in any version. But that pattern is functionally
identical with just "bash".
Approved by: portmgr (blanket)
Bump PORTREVISION for ports depending on the canonical version of GCC
as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3
to GCC 9.1 under most circumstances now after revision 507371.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.
PR: 238330
Bump PORTREVISION for ports depending on the canonical version of GCC
defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t
GCC 8.2 under most circumstances.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.
PR: 231590
When linking a library libA with a library libB using libtool, if libB.la
exists, libtool will add all libraries libB.la refers to (dependency_libs
field) to the linker command line and store them in the dependency_libs
field of libA.la. So everything that subsequently links with libA will also
link to these extra libraries. This causes too much overlinking.
This commit modifies Mk/Uses/libtool.mk so it empties the dependency_libs
field in .la libraries during staging. However, because .la libraries have
very limited use when dependency_libs is empty it makes sense to completely
remove them during staging.
So with this commit USES=libtool is modified to remove .la libraries and a
new form (USES=libtool:keepla) is introduced in case they need to be kept
(dependency_libs is still emptied).
(Only the first 15 lines of the commit message are shown above )
Update the sleuthkit to 4.1.3:
- Use libtool (instead of jumping from .11 to .12, we go back to .10)
- Include a patch which allows python bindings to work correctly (obtained from
Joachim Metz)
Update pytsk to 2014-02-09:
- Remove DOCS/EXAMPLES conditionals
- Don't override DOCSDIR and EXAMPLESDIR, mva's patch will do it soon
- Update sleuthkit port to the latest version 4.0.0
- Rephrase COMMENT (remove reference to now defunct @stake)
- Trim Makefile header and drop maintainership
Feature safe: yes
Update to version 3.2.3. This release has some minor bug fixes and features:
- Only need to specify first E01 file in a set of files
- Added -d option to tsk_recover
- DOS partitions are loaded even if an extended partition fails
- Cleanup of corrupt orphan FAT names
- RAW CD Support
Update to 2.00.
Major Updates:
- Support for split and disk images
- File system type can be detected (-f no longer required)
- New file system type names (for -f)
- Updated internal design
- New 'img_stat' tool to display details about the image file format
- New 'mmls' flag (-b) to print sizes in bytes
- New 'mmstat' tool to give details about the volume (media
management) system
- Non-printable charactors in UFS/ExtX names are replaced with '.'
- New Linux 'disk_sreset' tool to reset HPA on an ATA disk
- Renamed 'diskstat' to 'disk_stat' and 'sstrings' to 'srch_strings'
to make names less cryptic
Minor Bug Fixes:
- NTFS could go into an infinite loop if attribute list entry was
reallocated
- Last block group in ExtX fsstat output had incorrect percentage
of free blocks
- FreeBSD 5.x would produce incorrect 'icat' output for Ext2/3 and
UFS1 images because it used a 64-bit on-disk address
Approved by: maintainer timeout
- Update to version 1.73, which features many bugfixes and UFS2 support
- Teach about FreeBSD 6.X (and thus unbreak)
- Honor CC and CFLAGS
- Tidy up Makefile and pkg-plist (use DOCSDIR macro)
- Do not build file(1) since it's the base already (and the same version)
Approved by: maintainer timeout
[NEW PORT] sysutils/sleuthkit: The @stake Sleuth Kit for
The @stake Sleuth Kit (TASK) is the only open source forensic
toolkit for a complete analysis of Microsoft and UNIX file
systems. TASK enables investigators to identify and recover
evidence from images acquired during incident response or
from live systems.
WWW: http://www.atstake.com/research/tools/task/
PR: ports/55545
Submitted by: Pieter Danhieux <pieter@securax.be>
