profiles Linux/RedHat/x86/RedHat56.zip is x64

Looks like the RH profile uploaded to Linux/RedHat/x86/RedHat56.zip is x64 instead of x86

Dec 15 '16 00:12 hiddenillusion

I haven't looked at it yet, but why do you say that?

Mar 28 '17 20:03 gleeda

I was unsuccessful when attempting to use it with a memory dump for said config. During some troubleshooting, I noticed the following which made me believe it's for the wrong arch.:

$ unzip -d RedHat55_x86 profiles-master/Linux/RedHat/x86/RedHat55.zip Archive: profiles-master/Linux/RedHat/x86/RedHat55.zip inflating: RedHat55_x86/volatility/tools/linux/module.dwarf inflating: RedHat55_x86/boot/System.map-2.6.18-194.el5 $ unzip -d RedHat55_x64 profiles-master/Linux/RedHat/x64/RedHat55.zip Archive: profiles-master/Linux/RedHat/x64/RedHat55.zip inflating: RedHat55_x64/volatility/tools/linux/module.dwarf inflating: RedHat55_x64/boot/System.map-2.6.18-194.el5 $ unzip -d RedHat56_x86 profiles-master/Linux/RedHat/x86/RedHat56.zip Archive: profiles-master/Linux/RedHat/x86/RedHat56.zip inflating: RedHat56_x86/volatility/tools/linux/module.dwarf inflating: RedHat56_x86/boot/System.map-2.6.18-238.el5 $ unzip -d RedHat56_x64 profiles-master/Linux/RedHat/x64/RedHat56.zip Archive: profiles-master/Linux/RedHat/x64/RedHat56.zip inflating: RedHat56_x64/volatility/tools/linux/module.dwarf inflating: RedHat56_x64/boot/System.map-2.6.18-238.el5

$ egrep -R DW_AT_comp_dir RedHat5*/volatility/tools/linux/module.dwarf RedHat55_x64/volatility/tools/linux/module.dwarf:...DW_AT_comp_dir</usr/src/kernels/2.6.18-194.el5-x86_64> RedHat55_x86/volatility/tools/linux/module.dwarf:...DW_AT_comp_dir</usr/src/kernels/2.6.18-194.el5-i686> RedHat56_x64/volatility/tools/linux/module.dwarf:... DW_AT_comp_dir</usr/src/kernels/2.6.18-238.el5-x86_64> RedHat56_x86/volatility/tools/linux/module.dwarf:...DW_AT_comp_dir</usr/src/kernels/2.6.18-238.el5-x86_64>

Mar 29 '17 15:03 hiddenillusion