{"action":"created","issue":{"url":"https://api.github.com/repos/google/rekall/issues/189","repository_url":"https://api.github.com/repos/google/rekall","labels_url":"https://api.github.com/repos/google/rekall/issues/189/labels{/name}","comments_url":"https://api.github.com/repos/google/rekall/issues/189/comments","events_url":"https://api.github.com/repos/google/rekall/issues/189/events","html_url":"https://github.com/google/rekall/issues/189","id":181098216,"number":189,"title":"Cannot build PDB profile - no valid cabinets found","user":{"login":"madsumm","id":8310195,"avatar_url":"https://avatars.githubusercontent.com/u/8310195?v=3","gravatar_id":"","url":"https://api.github.com/users/madsumm","html_url":"https://github.com/madsumm","followers_url":"https://api.github.com/users/madsumm/followers","following_url":"https://api.github.com/users/madsumm/following{/other_user}","gists_url":"https://api.github.com/users/madsumm/gists{/gist_id}","starred_url":"https://api.github.com/users/madsumm/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/madsumm/subscriptions","organizations_url":"https://api.github.com/users/madsumm/orgs","repos_url":"https://api.github.com/users/madsumm/repos","events_url":"https://api.github.com/users/madsumm/events{/privacy}","received_events_url":"https://api.github.com/users/madsumm/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2016-10-05T08:55:58Z","updated_at":"2016-10-11T15:23:37Z","closed_at":null,"body":"Hi,\r\nWas trying to custom build profile using version_scan, fetch_pdb & parse_pdb.\r\nAt the fetch_pdb stage, I have the following errors:\r\n\r\n```\r\n$ rekal fetch_pdb ntkrnlmp.pdb 6E60B4B61FB04E34A3688B615F16020A1\r\n Trying to fetch http://msdl.microsoft.com/download/symbols/ntkrnlmp.pdb/6E60B4B61FB04E34A3688B615F16020A1/ntkrnlmp.pd_\r\n/tmp/tmpiyt6wD/ntkrnlmp.pd_: no valid cabinets found                                                                     \r\n\r\nAll done, errors in processing 1 file(s)\r\n2016-10-05 01:53:25,284:CRITICAL:rekall.1:Traceback (most recent call last):\r\n  File \"/usr/local/lib/python2.7/dist-packages/rekall/session.py\", line 860, in RunPlugin\r\n    result = plugin_obj.render(ui_renderer) or plugin_obj\r\n  File \"/usr/local/lib/python2.7/dist-packages/rekall/plugins/tools/mspdb.py\", line 152, in render\r\n    pdb_file_data = self.FetchPDBFile()\r\n  File \"/usr/local/lib/python2.7/dist-packages/rekall/plugins/tools/mspdb.py\", line 211, in FetchPDBFile\r\n    \"Ensure cabextract is installed.\\n\" % output_file)\r\nRuntimeError: Failed to decompress output file /tmp/tmpiyt6wD/ntkrnlmp.pdb. Ensure cabextract is installed.\r\n\r\n\r\n2016-10-05 01:53:25,285:CRITICAL:root:Failed to decompress output file /tmp/tmpiyt6wD/ntkrnlmp.pdb. Ensure cabextract is installed.\r\n. Try --debug for more information.\r\nTraceback (most recent call last):\r\n  File \"/usr/local/bin/rekal\", line 11, in <module>\r\n    sys.exit(main())\r\n  File \"/usr/local/lib/python2.7/dist-packages/rekall/rekal.py\", line 99, in main\r\n    user_session.RunPlugin(plugin_cls, **config.RemoveGlobalOptions(flags))\r\n  File \"/usr/local/lib/python2.7/dist-packages/rekall/session.py\", line 863, in RunPlugin\r\n    self._HandleRunPluginException(ui_renderer, e)\r\n  File \"/usr/local/lib/python2.7/dist-packages/rekall/session.py\", line 860, in RunPlugin\r\n    result = plugin_obj.render(ui_renderer) or plugin_obj\r\n  File \"/usr/local/lib/python2.7/dist-packages/rekall/plugins/tools/mspdb.py\", line 152, in render\r\n    pdb_file_data = self.FetchPDBFile()\r\n  File \"/usr/local/lib/python2.7/dist-packages/rekall/plugins/tools/mspdb.py\", line 211, in FetchPDBFile\r\n    \"Ensure cabextract is installed.\\n\" % output_file)\r\nRuntimeError: Failed to decompress output file /tmp/tmpiyt6wD/ntkrnlmp.pdb. Ensure cabextract is installed.\r\n```\r\n\r\nIt looks like msdl.microsoft.com is no longer available or missing.\r\nI tried on various memory images and with the same results.\r\nRgds\r\nMathew"},"comment":{"url":"https://api.github.com/repos/google/rekall/issues/comments/252950280","html_url":"https://github.com/google/rekall/issues/189#issuecomment-252950280","issue_url":"https://api.github.com/repos/google/rekall/issues/189","id":252950280,"user":{"login":"raviteja7","id":2549509,"avatar_url":"https://avatars.githubusercontent.com/u/2549509?v=3","gravatar_id":"","url":"https://api.github.com/users/raviteja7","html_url":"https://github.com/raviteja7","followers_url":"https://api.github.com/users/raviteja7/followers","following_url":"https://api.github.com/users/raviteja7/following{/other_user}","gists_url":"https://api.github.com/users/raviteja7/gists{/gist_id}","starred_url":"https://api.github.com/users/raviteja7/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/raviteja7/subscriptions","organizations_url":"https://api.github.com/users/raviteja7/orgs","repos_url":"https://api.github.com/users/raviteja7/repos","events_url":"https://api.github.com/users/raviteja7/events{/privacy}","received_events_url":"https://api.github.com/users/raviteja7/received_events","type":"User","site_admin":false},"created_at":"2016-10-11T15:23:37Z","updated_at":"2016-10-11T15:23:37Z","body":"I tested it, but still receiving the same error.\r\n\r\nThe GUID is 036C69F689E242E8B76E4D453901D6EC2\r\n\r\n![image](https://cloud.githubusercontent.com/assets/2549509/19276536/af7d1a88-8fa4-11e6-9077-711e510741f1.png)\r\n\r\n![image](https://cloud.githubusercontent.com/assets/2549509/19276655/1aa07f6c-8fa5-11e6-8abf-5a4e358415ce.png)\r\n\r\nThanks"}}
{"actor":{"display_login":"raviteja7"}}