Bug#575358: ITP: libpff -- Library and tools to read PFF, OFF, PAB, PST, OST files.

2010-03-25 Thread Christophe Monniez
Package: wnpp
Severity: wishlist
Owner: Debian Forensics forensics-devel@lists.alioth.debian.org


   Package name: libpff
Version: alpha-20100114
Upstream Author: Joachim Metz
URL: http://sourceforge.net/projects/libpff/
License: LGPL-3
Description: Library and tools to read PST, PFF, OFF and OST files.

Libpff is a library and a set of tools to read PST, PFF, OFF and OST files.
Those files are used essentially by Microsoft Outlook.
Libff is able to convert those files in universally readble text files
and extract binary attached files.
This tool is very useful for forensic purpose.

-- 
Christophe Monniez christophe.monn...@fccu.be




___
forensics-devel mailing list
forensics-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/forensics-devel


Administration of Debian-Forensics Mailinglists

2010-03-25 Thread Michael Prokop
Hi,

according to the listinfo the forensics-devel and forensics-changes
are run by dfence.242 at gmail.org (Christophe, is that you?) and
daniel at debian.org - can someone of you please add me as
administrator to those mailinglist?

Regarding the rational: I'd like to reduce the amount of spam on our
mailinglists. This issue has been initially brought up by Cristian
Greco on IRC and I think it's a good idea to improve our
signal-noise ratio.

Quoting an IRC session (with permission of buxy):

| 11:34  mikap hi, couldn't find anything in the FAQ about it, we - the 
debian-forensics team -
|are suffering from too much spam on our list - 
http://lists.alioth.debian.org/pipermail/forensics-devel/2010-March/thread.html 
-
|is there anything we can do against that?
| 11:40  buxy requiring moderation for all messages with a spam score above 5?
| 11:58  mikap buxy: that sounds useful, where can i configure/set that?
| 11:59  buxy mikap: header check on X-Spam-Flag: YES somewhere in mailman's 
web administration interface for the list
| 12:00  mikap buxy: ok thanks for the hint, will check

regards,
-mika-


signature.asc
Description: Digital signature
___
forensics-devel mailing list
forensics-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/forensics-devel


Re: aimage

2010-03-25 Thread Michael Prokop
* Christophe Monniez d-fe...@swing.be [Thu Mar 25, 2010 at 12:04:11AM +0100]:

 I created a git repository for the new aimage package.
 It seems to build safely here.

 I wait for your remarks or improvements.

The content of debian/changelog was missing and I did some minor
typo/formating improvements. Please check out git tree and let me
know whether that's fine for you and I'd upload it then. (A manpage
for aimage should be written once, JFTR.)

regards,
-mika-


signature.asc
Description: Digital signature
___
forensics-devel mailing list
forensics-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/forensics-devel


Re: Debian-Forensics team working towards Squeeze?

2010-03-25 Thread Michael Prokop
Hi,

thanks for all your feedback. I started to work on

  http://wiki.debian.org/DebianForensics/BugSquashing

and also did some cleanups on

  http://wiki.debian.org/DebianForensics/TODO

Please check it out and review/fix/add/update accordingly.

I'm wondering if an IRC meeting (something like a virtual
BugSquashingParty) is something we should try. Is anyone of you
interested in that as well? If so, please let me know and provide
your timezone and your prefered days of the week and daytime so I
can try to schedule such an event.

Some notes regarding your mails:

* Christophe Monniez christophe.monn...@fccu.be [Sat Mar 20, 2010 at 
12:02:47PM +0100]:
 Le samedi 20 mars 2010 à 11:24 +0100, Michael Prokop a écrit :

  * get rid of any present bugs, especially the RC ones - related to

  http://qa.debian.org/developer.php?login=forensics-de...@lists.alioth.debian.org

 I'm currently working on the reglookup rc bug.

Thanks, added.

  * check out which new additional packages should be integrated,
related to http://wiki.debian.org/DebianForensics/TODO

 I've started the work on aimage. 

Thanks, added (and check my other mail regarding this issue).

  BTW: Anyone of you planning to join DebConf10? http://debconf10.debconf.org/

  [1] http://lists.debian.org/debian-devel-announce/2010/03/msg5.html

 Too far, too much plane :-)

Ok, that's sad to hear. :)


* Tiago Bortoletto Vaz ti...@debian.org [Sat Mar 20, 2010 at 10:09:03AM 
-0200]:
 On Sat, 20 Mar 2010 11:24:36 +0100, Michael Prokop wrote

  * get rid of any present bugs, especially the RC ones - related to

 http://qa.debian.org/developer.php?login=forensics-de...@lists.alioth.debian.org

Thanks, linked. (I was aware of this page of course, I just want to
make sure no one is duplicating any efforts and on the other side
make sure that we don't miss any important issues we'd like to see
resolved for the squeeze release, so I think the Assigned to row
might help us on
http://wiki.debian.org/DebianForensics/BugSquashing, JFTR)

  * check out which new additional packages should be integrated,
related to http://wiki.debian.org/DebianForensics/TODO

 Also checking opened ITPs/RFPs related to forensics and trying to bring them
 to the team. (I'm specially interested in msnshadow)

Thanks, added.

  BTW: Anyone of you planning to join DebConf10? http://debconf10.debconf.org/

 I will. I usually work for the video team during DCs, but working on forensics
 team this year would be great.

Oh that's great news. If anyone else of the Debian-Forensics team is
at DebConf10 I'd volunteer to organize a Debcamp meeting - so please
let us know! :)


* Tim tim-proje...@sentinelchicken.org [Sun Mar 21, 2010 at 06:15:47PM -0700]:

  * make sure all our packages are up2date (matching current upstream
release)

 In regard to this, I'm in one of my active development cycles on
 RegLookup.  I'm getting some help from a certain Australian whiz kid
 and he's inspiring me to push the development further.  I was hoping
 to make one more release sometime soon and get it into squeeze if
 possible.  What do you guess my timeline would be on that?

Not yet sure when the real freeze for non-base packages will happen,
but I'd suggest that we should make sure we have up2date versions in
unstable so we can observe transitions to testing in time to react
on any possible problems.

Christophe, I noticed you worked on that already, should I upload
it?

  * check out which new additional packages should be integrated,
related to http://wiki.debian.org/DebianForensics/TODO

 In a quick look at that list, I'd love to see these be packaged:
   air
   fmem
   libpff
   dc3dd

Ok, I've added the information accordingly to
http://wiki.debian.org/DebianForensics/BugSquashing

Regarding fmem: do you use this in reallife?

 pyflag would of course be cool too, but it may be a lot more effort on
 short notice.

ACK.

 I agree with mika that hydra shouldn't be a high priority.  The
 few times I've used it, it either didn't do what I wanted or it
 crashed.  medusa seems to be much more stable, if lightly
 documented.  It's bloody fast too.

Ok, thanks for your feedback. Any objections against dropping hydra
from http://wiki.debian.org/DebianForensics/TODO ?

  I'd work on a new wiki page at http://wiki.debian.org/DebianForensics
  for coordinating the efforts if some of you are interested in joining.

 If you guys do have any nasty bugs in a package, let me know and I can
 try to help with the debugging/resolution or working with the upstream.

Thanks, Tim.

regards,
-mika-


signature.asc
Description: Digital signature
___
forensics-devel mailing list
forensics-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/forensics-devel


Re: RFS: chaosreader 0.94-2 (trace network sessions and export it to html format)

2010-03-25 Thread Michael Prokop
* eribe...@eriberto.pro.br eribe...@eriberto.pro.br [Sun Mar 21, 2010 at 
01:43:35PM -0300]:

 I need a sponsor to upload my package named chaosreader.

 The package is already in Debian and it is a revision because the
 debian/watch was wrong. However, I updated debian/control and I
 fixed some problems.

 The package is in git.

 http://git.debian.org/?p=forensics/chaosreader.git
 git clone ssh://login@git.debian.org/git/forensics/chaosreader.git
[...]

I'd take care of this, is git ID
2fabb523c4107f6bccb465c3d8898516ae145993 what you want to have
uploaded, right?

regards,
-mika-


signature.asc
Description: Digital signature
___
forensics-devel mailing list
forensics-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/forensics-devel


Re: RFS: chaosreader 0.94-2 (trace network sessions and export it to html format)

2010-03-25 Thread Eriberto



Hi Mika,

Yes. The ID is right. Alternatively, the same package is available at 
http://mentors.debian.net/debian/pool/main/c/chaosreader/chaosreader_0.94-2.dsc 
.

Thanks in advance.

Regards,

Eriberto - Brazil



2010/3/25 Michael Prokop m...@debian.org:


I'd take care of this, is git ID
2fabb523c4107f6bccb465c3d8898516ae145993 what you want to have
uploaded, right?


signature.asc
Description: OpenPGP digital signature
___
forensics-devel mailing list
forensics-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/forensics-devel


Re: RFS: chaosreader 0.94-2 (trace network sessions and export it to html format)

2010-03-25 Thread Michael Prokop
* Eriberto eribe...@eriberto.pro.br [Thu Mar 25, 2010 at 08:51:30PM -0300]:

 Yes. The ID is right. Alternatively, the same package is available
 at
 http://mentors.debian.net/debian/pool/main/c/chaosreader/chaosreader_0.94-2.dsc
 .

Thanks, tagged as debian/0.94-2 and uploaded.

regards,
-mika-


signature.asc
Description: Digital signature
___
forensics-devel mailing list
forensics-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/forensics-devel