Problems getting root file entry in pyewf

[MSKrakower]

I am trying to run this example from the /examplea/pyewf/ folder, but when I do I get the error:

pyewf_handle_get_root_file_entry: unable to retrieve root file entry. libewf_handle_get_root_file_entry: invalid handle - missing single files.

The E01 I am running it against is of a 2GB USB stick I filled with miscellaneous data. I created the E01 using ftkimager on a Windows machine. Any idea what could be causing this issue?

[rcordovano]

FYI, @MSKrakower, libewf is a project maintained by @joachimmetz at https://github.com/libyal/libewf. SleuthKit does not use pyewf, so you we don't have any experience to draw from to answer your question.

[joachimmetz]

@rcordovano thx for bringing this to my attention

@MSKrakower https://github.com/libyal/libewf/issues is the official libewf issue tracker. Indicate which version you are using. With pyewf I assume you are using the experimental WIP version.

Please describe in detail what steps you are taking, what issues you are running into and versions you are using. Otherwise I cannot help you much.

here is some more information on troubleshooting https://github.com/libyal/libewf/wiki/Troubleshooting