Skip to content

Files not exported when creating a report from a read-only case #2799

New issue
New issue
Open
#2806
Open
Files not exported when creating a report from a read-only case#2799
#2806
Assignees
wladimirleite
Labels
bug
@arisjr

Description

@arisjr
arisjr
opened on Feb 20, 2026

I need a help on this urgent case.

It's a multi-evidence case (two pendrive and one hard disk, processed with multiple -d, and not multicase) processed with -portable and accessed on a read only samba share, mounted on Z: letter.

For analysis, it's working OK, but when one do a report, that has ~27GB of bookmarked data, it generates a report with ~1.8GB, that only carries thumbs. When I try to access any file, it shows a blank page on preview. It is occurring on both html report and the portable IPED that goes with the report.

Logs of the iped-search-app.jar when generating a report follows below:

Z:\2025.0141539\auto_apreensao_2025.4741252\item2025.136611_M253209>java -jar SARD\iped\lib\iped-search-app.jar --nologfile
2026-02-19 13:36:09     [INFO]  [app.ui.AppMain]                        Indexador e Processador de Evid\Uffffffffcias Digitais 4.3.0
2026-02-19 13:36:09     [INFO]  [app.ui.AppMain]                           Java Version: 11.0.23
2026-02-19 13:36:09     [INFO]  [app.ui.AppMain]                           Java Home: C:\Program Files\BellSoft\LibericaJRE-11-Full
2026-02-19 13:36:09     [INFO]  [app.ui.AppMain]                           Java VM Name: OpenJDK 64-Bit Server VM
2026-02-19 13:36:09     [INFO]  [engine.config.Configuration]                   Loading configuration from Z:\2025.0141539\auto_apreensao_2025.4741252\item2025.136611_M253209\SARD\iped
2026-02-19 13:36:28     [ERROR] [parsers.python.PythonParser]                   JEP n\Uffffffff encontrado, todos os m\Uffffffffdulos python foram desligados. Veja https://github.com/sepinf-inc/IPED/wiki/User-Manual#python-modules
java.lang.UnsatisfiedLinkError: no jep in java.library.path: [C:\Program Files\BellSoft\LibericaJRE-11-Full\bin, C:\Windows\Sun\Java\bin, C:\Windows\system32, C:\Windows, C:\Program Files\BellSoft\LibericaJRE-11-Full\bin\, C:\Windows\system32, C:\Windows, C:\Windows\System32\Wbem, C:\Windows\System32\WindowsPowerShell\v1.0\, C:\Windows\System32\OpenSSH\, C:\Program Files (x86)\Microsoft SQL Server\160\DTS\Binn\, C:\Users\aristeu.agaj.000\AppData\Local\Microsoft\WindowsApps, ., .]
        at java.base/java.lang.ClassLoader.loadLibrary(Unknown Source)
        at java.base/java.lang.Runtime.loadLibrary0(Unknown Source)
        at java.base/java.lang.System.loadLibrary(Unknown Source)
        at jep.MainInterpreter.initialize(MainInterpreter.java:129)
        at jep.MainInterpreter.getMainInterpreter(MainInterpreter.java:101)
        at jep.Jep.<init>(Jep.java:133)
        at jep.SharedInterpreter.<init>(SharedInterpreter.java:60)
        at iped.parsers.python.PythonParser.getNewJep(PythonParser.java:176)
        at iped.parsers.python.PythonParser.getJep(PythonParser.java:165)
        at iped.engine.task.PythonTask.getJep(PythonTask.java:72)
        at iped.engine.task.PythonTask.getConfigurables(PythonTask.java:170)
        at iped.engine.config.Configuration.loadConfigurables(Configuration.java:220)
        at iped.app.ui.AppMain.start(AppMain.java:183)
        at iped.app.ui.AppMain.start(AppMain.java:92)
        at iped.app.ui.AppMain.main(AppMain.java:60)
2026-02-19 13:36:33     [INFO]  [app.ui.App]                    Starting...
2026-02-19 13:36:36     [INFO]  [engine.task.ImageThumbTask]                    Thumb Size: 256
2026-02-19 13:36:36     [INFO]  [engine.task.ImageThumbTask]                    Extract Thumb: false
InteropFactory: cannot load com.sun.javafx.embed.swing.newimpl.InteropFactoryN
2026-02-19 13:36:44     [INFO]  [iped.viewers.IcePDFViewer]                     IcePDFViewer took 865ms to be initialized.
2026-02-19 13:36:49     [INFO]  [app.ui.App]                    UI created
Temp Folder for Libraries: C:\Users\ARISTE~2.000\AppData\Local\Temp\iped-temp8917214769141772303
2026-02-19 13:36:49     [INFO]  [application.connection.LocalOfficeConnection]                  Opening local OpenOffice.org connection.
SleuthkitJNI: loaded libtsk_jni
2026-02-19 13:36:51     [INFO]  [engine.datasource.SleuthkitReader]                     Sleuthkit version 4.12.0-iped-patch detected.
2026-02-19 13:36:51     [INFO]  [iped.viewers.LibreOfficeViewer]                        LibreOffice running.
2026-02-19 13:36:51     [INFO]  [iped.viewers.LibreOfficeViewer$1]                      Constructing LibreOffice frame...
2026-02-19 13:36:52     [INFO]  [iped.viewers.LibreOfficeViewer$1]                      LibreOffice frame ok
2026-02-19 13:36:57     [INFO]  [sleuthkit.datamodel.SleuthkitCase]                     Time to initialize parent node cache: 3,421 ms
2026-02-19 13:36:57     [INFO]  [sleuthkit.datamodel.SleuthkitCase]                     sqlite-jdbc version 3.41.2.2 loaded in native mode
2026-02-19 13:36:57     [INFO]  [sleuthkit.datamodel.SleuthkitCase]                     Time to initialize parent node cache: 132 ms
2026-02-19 13:36:57     [INFO]  [sleuthkit.datamodel.SleuthkitCase]                     sqlite-jdbc version 3.41.2.2 loaded in native mode
2026-02-19 13:36:57     [INFO]  [engine.data.IPEDSource]                        Opening index Z:\2025.0141539\auto_apreensao_2025.4741252\item2025.136611_M253209\SARD\iped\index
2026-02-19 13:36:57     [INFO]  [engine.lucene.ConfiguredFSDirectory]                   Using MMapDirectory to open index...
2026-02-19 13:37:02     [INFO]  [engine.data.IPEDSource]                        Index opened
2026-02-19 13:37:02     [INFO]  [engine.data.IPEDSource]                        Creating LuceneId to ID mapping...
2026-02-19 13:37:05     [INFO]  [engine.data.BitmapBookmarks]                   Loading state from file C:\Users\ARISTE~2.000\AppData\Local\Temp\indexer1770908807136.iped
2026-02-19 13:37:05     [INFO]  [engine.data.IPEDMultiSource]                   Opening MultiReader...
2026-02-19 13:37:05     [INFO]  [engine.data.IPEDMultiSource]                   MultiReader opened
2026-02-19 13:37:06     [INFO]  [engine.data.IPEDMultiSource]                   Loaded 1 cases.
2026-02-19 13:37:06     [INFO]  [engine.preview.PreviewRepositoryManager]                       Configuring read-only PreviewRepository for: Z:\2025.0141539\auto_apreensao_2025.4741252\item2025.136611_M253209\SARD\iped
2026-02-19 13:37:06     [INFO]  [app.ui.UICaseDataLoader]                       Loading Columns
2026-02-19 13:37:07     [INFO]  [ui.columns.ColumnsManager]                     Loading default columns
2026-02-19 13:37:20     [INFO]  [parsers.ocr.OCRParser]                 Detected Tesseract 5.3.2-24-g3922
2026-02-19 13:37:20     [INFO]  [parsers.ocr.OCRParser]                 Tesseract optional image libraries: [libopenjp2, libwebp, libgif]
2026-02-19 13:37:20     [INFO]  [parsers.ocr.OCRParser]                 Process non-standard image formats enabled.
2026-02-19 13:37:20     [INFO]  [browsers.edge.EdgeWebCacheParser]                      Libesedb library version: 20181229
2026-02-19 13:37:21     [WARN]  [parsers.misc.PDFTextParser]                    Plugin JPEG2000 not found, JPX images will not be decoded from PDFs. You can download it from https://mvnrepository.com/artifact/com.github.jai-imageio/jai-imageio-jpeg2000/1.3.0 and put it in plugins folder. Warn: that plugin is worse to decode JPX outside of PDFs!
2026-02-19 13:37:21     [INFO]  [parsers.util.EsedbManager]                     Libesedb library version: 20181229
2026-02-19 13:37:21     [INFO]  [app.ui.UICaseDataLoader]                       Listing all items
2026-02-19 13:37:21     [INFO]  [app.ui.FileProcessor]                  Opening iped/help/Help_pt-BR.htm
2026-02-19 13:37:21     [INFO]  [app.ui.UICaseDataLoader]                       Listing all items Finished
2026-02-19 13:37:22     [INFO]  [app.ui.CaseSearcherFilter]                     Search and filtering took 294ms
2026-02-19 13:38:01     [INFO]  [engine.search.QueryBuilder]                    Expanded query terms: []
2026-02-19 13:38:57     [INFO]  [app.ui.ReportDialog]                   Generating report to C:\Users\aristeu.agaj.000\Desktop\relatorio_laudo_4492-2026-midias
2026-02-19 13:38:57     [INFO]  [app.ui.ReportDialog]                   Report command: [Z:\2025.0141539\auto_apreensao_2025.4741252\item2025.136611_M253209\SARD\iped\jre\bin\java.exe, -cp, Z:\2025.0141539\auto_apreensao_2025.4741252\item2025.136611_M253209\SARD\iped\lib\iped-search-app.jar, -Diped.ui.report, iped.app.bootstrap.Bootstrap, -d, C:\Users\ARISTE~2.000\AppData\Local\Temp\report9068179460538756544.iped, -o, C:\Users\aristeu.agaj.000\Desktop\relatorio_laudo_4492-2026-midias, -asap, C:\Users\ARISTE~2.000\AppData\Local\Temp\iped-16265400250440298268.report]
2026-02-19 13:39:24     [INFO]  [app.ui.ReportDialog$3]                 2026-02-19 13:39:24,214 main ERROR FileManager (Z:\2025.0141539\auto_apreensao_2025.4741252\item2025.136611_M253209\SARD\iped\log\IPED-2026-02-19-13-39-20.log) java.io.IOException: Could not create directory Z:\2025.0141539\auto_apreensao_2025.4741252\item2025.136611_M253209\SARD\iped\log java.io.IOException: Could not create directory Z:\2025.0141539\auto_apreensao_2025.4741252\item2025.136611_M253209\SARD\iped\log
        at org.apache.logging.log4j.core.util.FileUtils.mkdir(FileUtils.java:120)
        at org.apache.logging.log4j.core.util.FileUtils.makeParentDirs(FileUtils.java:137)
        at org.apache.logging.log4j.core.appender.FileManager$FileManagerFactory.createManager(FileManager.java:434)
        at org.apache.logging.log4j.core.appender.FileManager$FileManagerFactory.createManager(FileManager.java:422)
        at org.apache.logging.log4j.core.appender.AbstractManager.getManager(AbstractManager.java:114)
        at org.apache.logging.log4j.core.appender.OutputStreamManager.getManager(OutputStreamManager.java:100)
        at org.apache.logging.log4j.core.appender.FileManager.getFileManager(FileManager.java:182)
        at org.apache.logging.log4j.core.appender.FileAppender$Builder.build(FileAppender.java:96)
        at org.apache.logging.log4j.core.appender.FileAppender$Builder.build(FileAppender.java:52)
        at org.apache.logging.log4j.core.config.plugins.util.PluginBuilder.build(PluginBuilder.java:122)
        at org.apache.logging.log4j.core.config.AbstractConfiguration.createPluginObject(AbstractConfiguration.java:1120)
        at org.apache.logging.log4j.core.config.AbstractConfiguration.createConfiguration(AbstractConfiguration.java:1045)
        at org.apache.logging.log4j.core.config.AbstractConfiguration.createConfiguration(AbstractConfiguration.java:1037)
        at org.apache.logging.log4j.core.config.AbstractConfiguration.doConfigure(AbstractConfiguration.java:651)
        at org.apache.logging.log4j.core.config.AbstractConfiguration.initialize(AbstractConfiguration.java:247)
        at org.apache.logging.log4j.core.config.AbstractConfiguration.start(AbstractConfiguration.java:293)
        at org.apache.logging.log4j.core.LoggerContext.setConfiguration(LoggerContext.java:626)
        at org.apache.logging.log4j.core.LoggerContext.reconfigure(LoggerContext.java:699)
        at org.apache.logging.log4j.core.LoggerContext.reconfigure(LoggerContext.java:716)
        at org.apache.logging.log4j.core.LoggerContext.start(LoggerContext.java:270)
        at org.apache.logging.log4j.core.impl.Log4jContextFactory.getContext(Log4jContextFactory.java:245)
        at org.apache.logging.log4j.core.impl.Log4jContextFactory.getContext(Log4jContextFactory.java:47)
        at org.apache.logging.log4j.LogManager.getContext(LogManager.java:176)
        at org.apache.logging.log4j.LogManager.getLogger(LogManager.java:666)
        at org.apache.logging.log4j.LogManager.getRootLogger(LogManager.java:700)
        at iped.app.config.LogConfiguration.configureLogParameters(LogConfiguration.java:101)
        at iped.app.processing.Main.main(Main.java:310)
2026-02-19 13:39:24     [INFO]  [app.ui.ReportDialog$3]                 2026-02-19 13:39:24,218 main ERROR Could not create plugin of type class org.apache.logging.log4j.core.appender.FileAppender for element File: java.lang.IllegalStateException: ManagerFactory [org.apache.logging.log4j.core.appender.FileManager$FileManagerFactory@37c7595] unable to create manager for [Z:\2025.0141539\auto_apreensao_2025.4741252\item2025.136611_M253209\SARD\iped\log\IPED-2026-02-19-13-39-20.log] with data [org.apache.logging.log4j.core.appender.FileManager$FactoryData@3ed242a4] java.lang.IllegalStateException: ManagerFactory [org.apache.logging.log4j.core.appender.FileManager$FileManagerFactory@37c7595] unable to create manager for [Z:\2025.0141539\auto_apreensao_2025.4741252\item2025.136611_M253209\SARD\iped\log\IPED-2026-02-19-13-39-20.log] with data [org.apache.logging.log4j.core.appender.FileManager$FactoryData@3ed242a4]
        at org.apache.logging.log4j.core.appender.AbstractManager.getManager(AbstractManager.java:116)
        at org.apache.logging.log4j.core.appender.OutputStreamManager.getManager(OutputStreamManager.java:100)
        at org.apache.logging.log4j.core.appender.FileManager.getFileManager(FileManager.java:182)
        at org.apache.logging.log4j.core.appender.FileAppender$Builder.build(FileAppender.java:96)
        at org.apache.logging.log4j.core.appender.FileAppender$Builder.build(FileAppender.java:52)
        at org.apache.logging.log4j.core.config.plugins.util.PluginBuilder.build(PluginBuilder.java:122)
        at org.apache.logging.log4j.core.config.AbstractConfiguration.createPluginObject(AbstractConfiguration.java:1120)
        at org.apache.logging.log4j.core.config.AbstractConfiguration.createConfiguration(AbstractConfiguration.java:1045)
        at org.apache.logging.log4j.core.config.AbstractConfiguration.createConfiguration(AbstractConfiguration.java:1037)
        at org.apache.logging.log4j.core.config.AbstractConfiguration.doConfigure(AbstractConfiguration.java:651)
        at org.apache.logging.log4j.core.config.AbstractConfiguration.initialize(AbstractConfiguration.java:247)
        at org.apache.logging.log4j.core.config.AbstractConfiguration.start(AbstractConfiguration.java:293)
        at org.apache.logging.log4j.core.LoggerContext.setConfiguration(LoggerContext.java:626)
        at org.apache.logging.log4j.core.LoggerContext.reconfigure(LoggerContext.java:699)
        at org.apache.logging.log4j.core.LoggerContext.reconfigure(LoggerContext.java:716)
        at org.apache.logging.log4j.core.LoggerContext.start(LoggerContext.java:270)
        at org.apache.logging.log4j.core.impl.Log4jContextFactory.getContext(Log4jContextFactory.java:245)
        at org.apache.logging.log4j.core.impl.Log4jContextFactory.getContext(Log4jContextFactory.java:47)
        at org.apache.logging.log4j.LogManager.getContext(LogManager.java:176)
        at org.apache.logging.log4j.LogManager.getLogger(LogManager.java:666)
        at org.apache.logging.log4j.LogManager.getRootLogger(LogManager.java:700)
        at iped.app.config.LogConfiguration.configureLogParameters(LogConfiguration.java:101)
        at iped.app.processing.Main.main(Main.java:310)

2026-02-19 13:39:24,221 main ERROR Unable to invoke factory method in class org.apache.logging.log4j.core.appender.FileAppender for element File: java.lang.IllegalStateException: No factory method found for class org.apache.logging.log4j.core.appender.FileAppender java.lang.IllegalStateException: No factory method found for class org.apache.logging.log4j.core.appender.FileAppender
        at org.apache.logging.log4j.core.config.plugins.util.PluginBuilder.findFactoryMethod(PluginBuilder.java:236)
        at org.apache.logging.log4j.core.config.plugins.util.PluginBuilder.build(PluginBuilder.java:134)
        at org.apache.logging.log4j.core.config.AbstractConfiguration.createPluginObject(AbstractConfiguration.java:1120)
        at org.apache.logging.log4j.core.config.AbstractConfiguration.createConfiguration(AbstractConfiguration.java:1045)
        at org.apache.logging.log4j.core.config.AbstractConfiguration.createConfiguration(AbstractConfiguration.java:1037)
        at org.apache.logging.log4j.core.config.AbstractConfiguration.doConfigure(AbstractConfiguration.java:651)
        at org.apache.logging.log4j.core.config.AbstractConfiguration.initialize(AbstractConfiguration.java:247)
        at org.apache.logging.log4j.core.config.AbstractConfiguration.start(AbstractConfiguration.java:293)
        at org.apache.logging.log4j.core.LoggerContext.setConfiguration(LoggerContext.java:626)
        at org.apache.logging.log4j.core.LoggerContext.reconfigure(LoggerContext.java:699)
        at org.apache.logging.log4j.core.LoggerContext.reconfigure(LoggerContext.java:716)
        at org.apache.logging.log4j.core.LoggerContext.start(LoggerContext.java:270)
        at org.apache.logging.log4j.core.impl.Log4jContextFactory.getContext(Log4jContextFactory.java:245)
        at org.apache.logging.log4j.core.impl.Log4jContextFactory.getContext(Log4jContextFactory.java:47)
        at org.apache.logging.log4j.LogManager.getContext(LogManager.java:176)
        at org.apache.logging.log4j.LogManager.getLogger(LogManager.java:666)
        at org.apache.logging.log4j.LogManager.getRootLogger(LogManager.java:700)
        at iped.app.config.LogConfiguration.configureLogParameters(LogConfiguration.java:101)
        at iped.app.processing.Main.main(Main.java:310)

2026-02-19 13:39:24,222 main ERROR Null object returned for File in Appenders.
2026-02-19 13:39:24     [INFO]  [app.ui.ReportDialog$3]                 2026-02-19 13:39:24,238 main ERROR Unable to locate appender "LogFile" for logger config "root"
2026-02-19 13:39:34     [INFO]  [app.ui.ReportDialog$3]                 2026-02-19 13:39:34     [ERROR] [parsers.python.PythonParser]                   JEP n\Uffffffff encontrado, todos os m\Uffffffffdulos python foram desligados. Veja https://github.com/sepinf-inc/IPED/wiki/User-Manual#python-modules
2026-02-19 13:40:41     [INFO]  [app.ui.ReportDialog$3]                 2026-02-19 13:40:41     [ERROR] [engine.task.HashDBLookupTask]                  Hashes database path (hashesDB) must be configured in LocalConfig.txt
2026-02-19 13:40:42     [INFO]  [app.ui.ReportDialog$3]                 2026-02-19 13:40:42     [ERROR] [task.video.VideoThumbTask]                     Error testing MPLAYER!
2026-02-19 13:40:42     [INFO]  [app.ui.ReportDialog$3]                 2026-02-19 13:40:42     [ERROR] [task.video.VideoThumbTask]                     MPlayer Configured = Z:\2025.0141539\auto_apreensao_2025.4741252\item2025.136611_M253209\SARD\iped/tools/mplayer/mplayer.exe
2026-02-19 13:40:42     [ERROR] [task.video.VideoThumbTask]                     Check mplayer path and try to run it from terminal.
2026-02-19 13:41:06     [INFO]  [app.ui.ReportDialog$3]                 2026-02-19 13:41:06     [ERROR] [engine.task.PhotoDNATask]                      Optional photoDNA lib not found in plugins folder. If you are law enforcement, ask iped@pf.gov.br
2026-02-19 13:41:06     [INFO]  [app.ui.ReportDialog$3]                 2026-02-19 13:41:06     [ERROR] [engine.task.PhotoDNALookup]                    Optional photoDNA lib not found in plugins folder. If you are law enforcement, ask iped@pf.gov.br
2026-02-19 13:41:06     [INFO]  [app.ui.ReportDialog$3]                 2026-02-19 13:41:06     [ERROR] [task.carver.LedCarveTask]                      Hashes database path (hashesDB) must be configured in LocalConfig.txt
2026-02-19 13:41:19     [INFO]  [app.ui.ReportDialog$3]                 2026-02-19 13:41:19     [ERROR] [sleuthkit.datamodel.SleuthkitCase]                     Error freeing case handle.
org.sleuthkit.datamodel.TskCoreException: No entry for case SingleUser:Z:\2025.0141539\auto_apreensao_2025.4741252\item2025.136611_M253209\SARD\sleuth.db in cache. Case may have been closed
        at org.sleuthkit.datamodel.SleuthkitJNI$HandleCache.getCaseHandles(SleuthkitJNI.java:193) ~[sleuthkit-4.12.0.p1.jar:?]
        at org.sleuthkit.datamodel.SleuthkitJNI$HandleCache.closeHandlesAndClearCache(SleuthkitJNI.java:308) ~[sleuthkit-4.12.0.p1.jar:?]
        at org.sleuthkit.datamodel.SleuthkitJNI$CaseDbHandle.free(SleuthkitJNI.java:411) ~[sleuthkit-4.12.0.p1.jar:?]
        at org.sleuthkit.datamodel.SleuthkitCase.close(SleuthkitCase.java:10554) [sleuthkit-4.12.0.p1.jar:?]
        at org.sleuthkit.datamodel.SleuthkitCase.finalize(SleuthkitCase.java:10532) [sleuthkit-4.12.0.p1.jar:?]
        at java.lang.System$2.invokeFinalize(Unknown Source) [?:?]
        at java.lang.ref.Finalizer.runFinalizer(Unknown Source) [?:?]
        at java.lang.ref.Finalizer$FinalizerThread.run(Unknown Source) [?:?]
2026-02-19 13:41:33     [INFO]  [app.ui.ReportDialog$3]                 2026-02-19 13:41:33     [ERROR] [parsers.mail.OutlookDBXParser]                 DBX parser not found, DBX mailboxes will NOT be expanded.
2026-02-19 13:51:22     [INFO]  [app.ui.ReportDialog$3]                 IPED finished.
Check the log at Z:\2025.0141539\auto_apreensao_2025.4741252\item2025.136611_M253209\SARD\iped\log\IPED-2026-02-19-13-39-20.log

Thanks and regards,

Metadata

Metadata

Assignees

Labels

bug

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions