Installation fails (debian sid): sleuthkit-java.deb cannot be installed

[IrregularLogic]

Hi,

I am trying to install sleuthkit and autopsy on a deb testing computer and get stuck during the process.

Step 1 in installation instructions - prerequisites

• execution of ./install_prereqs_ubuntu.sh works here, but I have to make file executable first and use ./ for starting.

Step 2 in installation instructions: - sleuth kit

• sleuthkit (4.12.1+dfsg-2) can be found in deb repositories - should it be de-installed first before doing anything else?
• execution of the sleuthkit java installer not working:

(as root): dpkg -i sleuthkit-java_4.12.1-1_amd64.deb
dpkg: Fehler beim Bearbeiten des Archivs sleuthkit-java_4.12.1-1_amd64.deb (--install):
Versuch, »/usr/lib/x86_64-linux-gnu/libtsk.so.19.2.1« zu überschreiben, welches auch in Paket libtsk19t64:amd64 4.12.1+dfsg-2 ist
Trigger für libc-bin (2.38-7) werden verarbeitet ...
Fehler traten auf beim Bearbeiten von:
sleuthkit-java_4.12.1-1_amd64.deb

How should I proceed?

[markmckinnon]

What happens if you uninstall any and all version of Sleuthkit and then try and run dpkg -i sleuthkit-java_4.12.1-1_amd64.deb again.

[IrregularLogic]

• Removed sleuthkit installation via apt-get (synaptic) uninstaller,
• tried dpkg -i sleuthkit-java again, same results.

There is a similar issue for other distribution (kali) here: sleuthkit/sleuthkit#2822

But the steps to solve issues do not seem possible here as in 2822 sleuthkit should be (re-) installed via apt-get first and the steps order seems unclear to me, what to do/reinstall/remove first (really step-by-step).

[IrregularLogic]

It's been a while and I dropped trying autopsy until now. But still issues and questions.

(1) Why do I have to install a custom java environment at all? There is one installed on my PC that came with package management and has never caused issues.

(2) I have now been able finally to install autopsy/sleuthkit latest version and successfully ran it on an old 80GB drive to see how it works and nicely it found quite a lot of stuff.
BUT: today I wanted to run it again and it failed. Error is "Cannot create case" - "void org.sleuthkit.datamodel.SleuthkitJNI$CaseDbHandle.(vava.lang.String.orgsleuthikit.datamodel.SleuthikitJNI$1)'
Why is that and how to fix it? It has NOT helped to simply re-install the java that came with autopsy.

(3) At the very very first run of autopsy the splash screen (that one with the dog) is shown and BEHIND THAT VERY SCREEN DIRECTLY is a form that wants to be clicked, but as it is hidden behind the dog this is not possible. I already thought it does not work, but then I switched windows using KDE window manager and was able to X-click the window (close it whatever it does). Why cant the java windows be opened and shown at a place where one can actually see them an intereact with them?

(4) Running autopsy first time: when it did work I clicked the domains "Images/Videos", "Communications", "Geolocations" etc. to see what these are doing. But the windows that were shown were hidden half way. The windows were opened at top of visible screen area and their top half was moved outside this area so it was totally impossible to see their content nor click there nor drag the window away to a more convenient location.
Why is that and how do I fix it?

Thanks for this tool but some things would like improvement...