Comments (4)
Here is a System.map file. Can you try it with it and show the way how you did it?
https://github.com/raspberrypi/firmware/tree/master/extra
from profiles.
Hi @markoNR , thanks for your reply. Now I am getting another error while creating profile. Please see the below commands and outputs and help me please. I am on kernel 4.4.38-v7+
`test@test-desktop:~/volatility/tools/linux$ make
make -C //lib/modules/4.4.38-v7+/build CONFIG_DEBUG_INFO=y M="/home/test/volatility/tools/linux" modules
make[1]: Entering directory '/usr/src/linux-headers-4.4.38-v7+'
Building modules, stage 2.
MODPOST 1 modules
make[1]: Leaving directory '/usr/src/linux-headers-4.4.38-v7+'
dwarfdump -di module.ko > module.dwarf
dwarfdump ERROR: dwarf_attrlist: DW_DLE_UNKNOWN_FORM (242) Possibly corrupt DWARF data (242)
Makefile:10: recipe for target 'dwarf' failed
make: *** [dwarf] Error 1
test@test-desktop:~/volatility/tools/linux$ sudo make
make -C //lib/modules/4.4.38-v7+/build CONFIG_DEBUG_INFO=y M="" modules
make[1]: Entering directory '/usr/src/linux-headers-4.4.38-v7+'
CHK include/config/kernel.release
CHK include/generated/uapi/linux/version.h
CHK include/generated/utsrelease.h
make[2]: *** No rule to make target 'arch/arm/tools/gen-mach-types', needed by 'include/generated/mach-types.h'. Stop.
arch/arm/Makefile:315: recipe for target 'archprepare' failed
make[1]: *** [archprepare] Error 2
make[1]: Leaving directory '/usr/src/linux-headers-4.4.38-v7+'
Makefile:10: recipe for target 'dwarf' failed
make: *** [dwarf] Error 2
`
from profiles.
Ok here is how I did it:
- Update your raspberry pi
sudo apt-get update && sudo apt-get upgrade
- Start rpi-update
sudo rpi-update
- Reboot
sudo reboot
- Download and install rpi-source (wiki)
sudo wget https://raw.githubusercontent.com/notro/rpi-source/master/rpi-source -O /usr/bin/rpi-source && sudo chmod +x /usr/bin/rpi-source && /usr/bin/rpi-source -q --tag-update
And run it:
rpi-source
- Now you should be able to build it properly, BUT at this point the module.ko file was either build with errors or somehow wrong and I don't know why. So I decided to download and build libdwarf manually.
(described here)
git clone https://github.com/tomhughes/libdwarf.git
apt-get install libelf1 libelf-dev
cd libdwarf/
./configure
make dd
cp dwarfdump/dwarfdump /usr/local/bin/
cp dwarfdump/dwarfdump.conf /usr/local/lib/
cp libdwarf/libdwarf.a /usr/local/lib
/usr/local/bin/dwarfdump -di ./module.o > module.dwarf
Then run make again in the volatility folder.
- The last step is to take the file and zip it together with the System.map file. If you get an exception from volatility, you have to checkout the branch where this error is already fixed or just edit the dwarf.py file.
I hope this helps!
from profiles.
Hi @markoNR , thanks for guiding me. Your method works like charm, but there is another problem. Using your method, I am able to compile and run volatility and LiME and I can create the profile as well, but upon running any volatility command, I am getting "No suitable address space mapping found" error. I have attached screenshot below. Please help me to solve this issue.
from profiles.
Related Issues (20)
- Request: Need profile for HighSierra_10.13.4_17E199 HOT 1
- No Suitable Address space mapping Found
- Error when building Linux profile HOT 1
- Linux Profile Builder
- Request: Need profile for macOS 10.14.3 (18D109) | Mojave HOT 2
- Profile created for macOS 10.11.6_15G31x64 does not work HOT 1
- Which profile should I use? HOT 1
- Win10 Issue
- Unable to run vol.py plugins for "Ubuntu 16.04.6" target
- Profile for catalinas
- Im using version 2.6 on Windows 10 and Kali to get a dump file but I always get the message "Unable to read pages for task"
- How to create a profile outside of a running system?
- Volatility fails with traceback on Linux (possible profile issue) HOT 2
- Problem parsing Red Hat 7.6 vmem image with custom built profile
- AddrSpaceError with Ubuntu 18.04.3x64 profile on Ubuntu 18.04.3 - 4.15.0-55-generic
- Suitable for volatility3? HOT 1
- Ubuntu 21.04 Profile
- macOS Monterey
- I hope to contribute to the project
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from profiles.