Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

psort failing on corrupt storage file

See original GitHub issue

Description of problem:

After locking a psort running session with “Ctrl+C”…

Command line and arguments:

# psort.py -o l2tcsv -w home.timeline.csv /mnt/home.plaso.dump

Source data:

Linux home dirs

Plaso version:

plaso - psort version 20210213

Operating system Plaso is running on:

Ubuntu 20.04.2 LTS

Installation method:

apt-get

Debug output/tracebacks:

`lab ~ # psort.py -o l2tcsv -w home.timeline.csv /mnt/home.plaso.dump 2021-03-16 16:07:16,468 [INFO] (MainProcess) PID:1241 <data_location> Determined data location: /usr/share/plaso Traceback (most recent call last): File “/usr/lib/python3/dist-packages/plaso/storage/interface.py”, line 417, in GetSessions session_start = next(session_start_generator) StopIteration

During handling of the above exception, another exception occurred:

Traceback (most recent call last): File “/usr/bin/psort.py”, line 101, in <module> if not Main(): File “/usr/bin/psort.py”, line 74, in Main tool.ProcessStorage() File “/usr/lib/python3/dist-packages/plaso/cli/psort_tool.py”, line 541, in ProcessStorage for session in storage_reader.GetSessions(): File “/usr/lib/python3/dist-packages/plaso/storage/interface.py”, line 419, in GetSessions raise IOError(‘Missing session start: {0:d}’.format(session_index)) OSError: Missing session start: 2 `