Bug 607962

Summary:	app-forensics/plaso - tool designed to extract timestamps from various files
Product:	Gentoo Linux	Reporter:	Hack_leberry Finn <kacper>
Component:	New packages	Assignee:	Default Assignee for New Packages <maintainer-wanted>
Status:	UNCONFIRMED ---
Severity:	normal	CC:	kacper
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:
Bug Blocks:	547418
Attachments:	app-forensics/plaso-1.5.1.ebuild

Description Hack_leberry Finn 2017-02-01 21:48:54 UTC

Created attachment 462174 [details]
app-forensics/plaso-1.5.1.ebuild

This is ebuild which I have prepared for Avidata Odzyskiwanie Danych (my polish data recovery company). It is modified very old version (1.2.0) plaso from spike overlay. Generally I added new packages requirements and new packages versions requirements.
Joachim Metz (author of this project) often removes old "experimental" versions from github, so RESTRICT="mirror" might fail after some time (be warned), but now it is only one solution to automatic download sources.
It was checked on x86 and amd64 architecture, but it is "keyworded" as it is only proposition of ebuild. It works with new version of libewf signed as 20160424. Ebuild for this version of libewf library is solution of bug: https://bugs.gentoo.org/show_bug.cgi?id=547418