Developing on MacOS¶
To download the latest version of Plaso you’ll need to install the git tools: http://git-scm.com/downloads
Checkout the plaso source from the git repo:
git clone https://github.com/log2timeline/plaso.git
Check if you have all the dependencies installed and have the right minimum version:
Note that some dependencies are actively under development and can be frequently updated, therefore we recommend checking the status of the dependencies regularly.
If check_dependencies.py keeps indicating it detected an out of date version check if the following directory might still contain an older version:
Apple also ships version 2.0.1 of pyparsing under
/System/Library/Frameworks/Python.framework which is loaded first, even if you have a newer pyparsing installed. You can work around this by specifying the PYTHONPATH when you run one of the command line tools - try
PYTHONPATH=/Library/Python/2.7/site-packages:$PYTHONPATH ./tools/log2timeline.py --help if you’re having problems.
If you intend to do development on plaso you’ll also need to install some development tools:
- PyLint 1.7.x
- Python Mock