Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Running bulk_extractor with debug options has not effect on run #403

Open
laissezfarrell opened this issue Apr 12, 2023 · 4 comments
Open
Assignees
Labels

Comments

@laissezfarrell
Copy link

laissezfarrell commented Apr 12, 2023

Running bulk_extractor with this command:
bulk_extractor -d8 -o /home/accessions/b_e2x_errors/debug_mode06 -R /home/accessions/UA2023-0021/objects/OPD/ -F /home/scripts/be_regex/uaregex.txt

which should disable scanners resulted in the following scanners being run:

aes
base64
elf
evtx
exif
facebook
find
gzip
httplogs
json
kml_carved
msxml
net
ntfsindx
ntfslogfile
ntfsmft
ntfsusn
pdf
rar
sqlite
utmp
vcard_carved
windirs
winlnk
winpe
winprefetch
zip
accts
email
gps

@simsong
Copy link
Owner

simsong commented Apr 12, 2023

Debug mode is used for debugging. It is a mask that each scanner can interpret as it wishes. The scanners that are enabled are the default scanners. If you wish to disable them, you should add -xall at the start of the command line.

What are you actually trying to do? I don't see an error here.

@simsong simsong self-assigned this Apr 12, 2023
@simsong simsong added the bug label Apr 12, 2023
@laissezfarrell
Copy link
Author

This is outside my wheelhouse. Another person was helping me identify issues and had asked that I run bulk_extractor with this debug option. The results suggested to them that "DEBUG_NO_SCANNERS (ie. -d8) has a definition in the source code but then it's never used if it's set. So, -d8 doesn't do anything currently in version 2.0.2."

I created this with the other bugs I reported, but am not one who usually uses debug mode.

@simsong
Copy link
Owner

simsong commented Apr 14, 2023

We greatly appreciate your input and I'll be addressing each item individually over the next few weeks. Seriously, this kind of feedback in invaluable. Thank you!

@simsong
Copy link
Owner

simsong commented Apr 16, 2023

I thinking of removing the global 'debug' variable as it isn't really being used. Thoughts?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants