Linux

Debian-based distribution

(Debian, Ubuntu, Kbuntu, etc. )

There are two different packages for Debian, depending on your architecture : 32 or 64 bits.

If you do not wish to receive news about DFF just leave the form empty and directly click on the Download button.

You can install DFF using the command dpkg in a shell; or use the synaptic graphical (GUI) package helper and installer.

To install using synaptic, double click on the .deb package and synaptic will check your system for the required dependencies and install them, if required, prior to installing DFF.

To install via the command line (shell) with dpkg, you must first install the required dependencies before installing DFF. To install the dependencies via the command line (shell), use the following command:

#> aptitude -y install python-qscintilla2 python-qt4 python-magic python-qt4-phonon

Now you can use this command to install DFF, depending on your architecture :

#> if [ $(uname -m | grep '64') ]; then dpkg -i dff-1.2.0_amd64.deb; else dpkg -i dff-1.2.0_i386.deb; fi

Fedora, Centos and RHEL

CERT now provides DFF package with every optional dependencies as separate package.

Please search on the announcements page for updates on lastest DFF version supported.

What Fedora, Centos and RHEL users have to do is just to add cert.org repository following instruction at the bottom of this page.

Gentoo

There are two ways to install DFF on a Gentoo distribution: with or without ebuild.

Using ebuild

You can use layman to add the pentoo overlay which contain the ebuild, thanks to ikelos and pentoo team providing it ! Have a look at their trac for latest DFF version supported and changes comments.

If you don't have layman installed:

#> emerge layman
#> echo "source /var/lib/layman/make.conf" >> /etc/make.conf

Then add the pentoo overlay :

#> layman -a pentoo

Then you can emerge DFF and it's dependencies. DFF ebuild is masked for some architecture so, for example on x86 don't forget to unmask :

ACCEPT_KEYWORDS="~x86" emerge dff

or on an amd64 compatible architecture :

ACCEPT_KEYWORDS="~amd64" emerge dff

Without ebuild

In order to compile and run DFF you will need to install some dependencies :

• CMake >= 2.8
• Swig >= 1.38
• PyQt4 >= 4.6
• optional :
  • fuse
  • libbfio separate installation required to have libpff working
  • libpff without shipped libbfio, install it after libbfio
  • libewf
  • afflib

Use the following commands to get all these dependencies :

#> emerge -av cmake
#> echo ">=dev-lang/swig-1.3.38" >> /etc/portage/package.keywords
#> emerge -av swig
#> echo ">=dev-python/PyQt4-4.6" >> /etc/portage/package.keywords
#> emerge -av PyQt4
#> emerge -av app-forensics/libewf
#> emerge -av sys-fs/fuse

Then, please refer to the section Installation from source code to compile DFF.

Other Linux / Unix

Please refer to the section Installation from source code to compile DFF.