{"action":"created","issue":{"url":"https://api.github.com/repos/sans-dfir/sift/issues/80","labels_url":"https://api.github.com/repos/sans-dfir/sift/issues/80/labels{/name}","comments_url":"https://api.github.com/repos/sans-dfir/sift/issues/80/comments","events_url":"https://api.github.com/repos/sans-dfir/sift/issues/80/events","html_url":"https://github.com/sans-dfir/sift/issues/80","id":101958339,"number":80,"title":"Plaso no longer installed after update-sift","user":{"login":"esecrpm","id":7072942,"avatar_url":"https://avatars.githubusercontent.com/u/7072942?v=3","gravatar_id":"","url":"https://api.github.com/users/esecrpm","html_url":"https://github.com/esecrpm","followers_url":"https://api.github.com/users/esecrpm/followers","following_url":"https://api.github.com/users/esecrpm/following{/other_user}","gists_url":"https://api.github.com/users/esecrpm/gists{/gist_id}","starred_url":"https://api.github.com/users/esecrpm/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/esecrpm/subscriptions","organizations_url":"https://api.github.com/users/esecrpm/orgs","repos_url":"https://api.github.com/users/esecrpm/repos","events_url":"https://api.github.com/users/esecrpm/events{/privacy}","received_events_url":"https://api.github.com/users/esecrpm/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-08-19T17:51:48Z","updated_at":"2015-08-19T20:46:02Z","closed_at":null,"body":"Starting from the SIFT appliance, ran REMnux install, rebooted, ran update-sift, ran update-remnux, rebooted.  After reboot, plaso is no longer found (log2timeline.py: command not found).\r\n\r\nAttempted to install manually:\r\nsansforensics@siftworkstation:~$ sudo apt-get install python-plaso\r\nReading package lists... Done\r\nBuilding dependency tree       \r\nReading state information... Done\r\nSome packages could not be installed. This may mean that you have\r\nrequested an impossible situation or if you are using the unstable\r\ndistribution that some required packages have not yet been created\r\nor been moved out of Incoming.\r\nThe following information may help to resolve the situation:\r\n\r\nThe following packages have unmet dependencies:\r\n python-plaso : Depends: python-dfvfs but it is not going to be installed\r\n                Depends: pytsk3 but it is not going to be installed\r\n                Recommends: pyelasticsearch but it is not installable\r\nE: Unable to correct problems, you have held broken packages.\r\n\r\n\r\nShowing the relavant(?) lines in sift-install.log (can provide if needed):\r\nThe following extra packages will be installed:\r\n  libtsk libtsk-dev\r\nThe following packages will be REMOVED:\r\n  python-dfvfs python-plaso pytsk3\r\nThe following packages will be upgraded:\r\n  libtsk libtsk-dev sleuthkit\r\n3 upgraded, 0 newly installed, 3 to remove and 3 not upgraded.\r\nNeed to get 7,493 kB of archives.\r\nAfter this operation, 36.7 MB of additional disk space will be used.\r\nGet:1 http://ppa.launchpad.net/sift/stable/ubuntu/ trusty/main sleuthkit amd64 4.1.30.4-1sift1~trusty [4,808 kB]\r\nGet:2 http://ppa.launchpad.net/sift/stable/ubuntu/ trusty/main libtsk-dev amd64 4.1.30.4-1sift1~trusty [2,166 kB]\r\nGet:3 http://ppa.launchpad.net/sift/stable/ubuntu/ trusty/main libtsk amd64 4.1.30.4-1sift1~trusty [519 kB]\r\nFetched 7,493 kB in 14s (503 kB/s)\r\n(Reading database ... 239039 files and directories currently installed.)\r\nRemoving python-plaso (1.3.0-2ppa1~trusty) ..."},"comment":{"url":"https://api.github.com/repos/sans-dfir/sift/issues/comments/132778708","html_url":"https://github.com/sans-dfir/sift/issues/80#issuecomment-132778708","issue_url":"https://api.github.com/repos/sans-dfir/sift/issues/80","id":132778708,"user":{"login":"DigiAngel","id":947191,"avatar_url":"https://avatars.githubusercontent.com/u/947191?v=3","gravatar_id":"","url":"https://api.github.com/users/DigiAngel","html_url":"https://github.com/DigiAngel","followers_url":"https://api.github.com/users/DigiAngel/followers","following_url":"https://api.github.com/users/DigiAngel/following{/other_user}","gists_url":"https://api.github.com/users/DigiAngel/gists{/gist_id}","starred_url":"https://api.github.com/users/DigiAngel/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/DigiAngel/subscriptions","organizations_url":"https://api.github.com/users/DigiAngel/orgs","repos_url":"https://api.github.com/users/DigiAngel/repos","events_url":"https://api.github.com/users/DigiAngel/events{/privacy}","received_events_url":"https://api.github.com/users/DigiAngel/received_events","type":"User","site_admin":false},"created_at":"2015-08-19T20:46:02Z","updated_at":"2015-08-19T20:46:02Z","body":"Same here as of a second ago:\r\n\r\n* ERROR: Install Failure: python-plaso (Error Code: 100)\r\n* ERROR: Install Failure: pytsk3 (Error Code: 100)\r\n* ERROR: Install Failure: mantaray (Error Code: 100)\r\n\r\nThis was done using update-sift"}}