Hi @karlvanderschyff , for the current issue you're experiencing you can run the following:
sudo python3 -m pip install "pyparsing>=3.0.0"

Once done, it should work again. We have a PR issued which will fix this for existing installs, but clean installs in the future won't have this issue.

Cheers!

Thank very much @digitalsleuth. Worked 100%.

Duplicate of #617

@digitalsleuth

Unfortunately, that fix doesn't work for me. I am currently using v0.14.30 (2024-05-06).

I've also tried upgrading pip like the output said but I get the same error when running psteal.py or log2timeline.py

$ sudo python3 -m pip install "pyparsing>=3.0.0"
[sudo] password for ######:
Requirement already satisfied: pyparsing>=3.0.0 in /usr/lib/python3/dist-packages (3.0.9)
WARNING: Keyring is skipped due to an exception: Failed to unlock the item!
WARNING: You are using pip version 21.0.1; however, version 24.0 is available.
You should consider upgrading via the '/usr/bin/python3 -m pip install --upgrade pip' command.

@bmmojo Were you running the base install using cast, or using the SIFT appliance?

@digitalsleuth cast install.

Hi @bmmojo , could you run the following and provide the output:
sudo python3 -m pip list
python3 -V (make note, that is a capital V, to determine the version)

@bmmojo I had a same error message as shown by you.
For me, I've tried a command below, it works.
$ python3 -m pip install "pyparsing>=3.0.0
Defaulting to user installation because normal site-packages is not writeable
Collecting pyparsing>=3.0.0
Downloading pyparsing-3.1.2-py3-none-any.whl.metadata (5.1 kB)
Downloading pyparsing-3.1.2-py3-none-any.whl (103 kB)
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 103.2/103.2 kB 1.5 MB/s eta 0:00:00
Installing collected packages: pyparsing
Attempting uninstall: pyparsing
Found existing installation: pyparsing 2.4.7
Uninstalling pyparsing-2.4.7:
Successfully uninstalled pyparsing-2.4.7

Seems like my system has old version of pyparsing 2.4.7. after uninstalling,
my log2timeline.py commands start to work.
$ log2timeline.py -h
usage: log2timeline.py

Hope it helps.

Sorry for the late reply!

@kennykim1 Your method worked.

@digitalsleuth
sudo python3 -m pip list: piplistoutput.txt
python3 -V: Python 3.10.12

Is this still an issue?

@ekristen with kenny's fix it now works. So no.

Good deal. We are working on the 24.04 update. We'll make sure to get this included there and backport to 22.04 if we can.