search

MITRECND / bro-http2

Plugin for Zeek/Bro which provides http2 decoder/analyzer
Other
30 stars 22 forks source link

Zeek v5 compatibility #19

Closed eric-ooi closed 1 year ago

eric-ooi commented 1 year ago

Zeek v5.0 was just released and I'm seeing the following errors when trying to run zeekctl deploy:

[zeek@sensor zeek-5.0.0]$ zeekctl deploy
checking configurations ...
logger scripts failed.
error in /opt/zeek/share/zeek/base/init-bare.zeek, line 1: cannot load plugin library /opt/zeek/lib64/zeek/plugins/packages/bro-http2//lib/mitrecnd-HTTP2.linux-x86_64.so: /opt/zeek/lib64/zeek/plugins/packages/bro-http2//lib/mitrecnd-HTTP2.linux-x86_64.so: undefined symbol: _ZN4zeek8analyzer3tcp23TCP_ApplicationAnalyzer17AnalyzerViolationEPKcS4_i
fatal error in /opt/zeek/share/zeek/base/init-bare.zeek, line 1: aborting after plugin errors

manager scripts failed.
error in /opt/zeek/share/zeek/base/init-bare.zeek, line 1: cannot load plugin library /opt/zeek/lib64/zeek/plugins/packages/bro-http2//lib/mitrecnd-HTTP2.linux-x86_64.so: /opt/zeek/lib64/zeek/plugins/packages/bro-http2//lib/mitrecnd-HTTP2.linux-x86_64.so: undefined symbol: _ZN4zeek8analyzer3tcp23TCP_ApplicationAnalyzer17AnalyzerViolationEPKcS4_i
fatal error in /opt/zeek/share/zeek/base/init-bare.zeek, line 1: aborting after plugin errors

proxy-1 scripts failed.
error in /opt/zeek/share/zeek/base/init-bare.zeek, line 1: cannot load plugin library /opt/zeek/lib64/zeek/plugins/packages/bro-http2//lib/mitrecnd-HTTP2.linux-x86_64.so: /opt/zeek/lib64/zeek/plugins/packages/bro-http2//lib/mitrecnd-HTTP2.linux-x86_64.so: undefined symbol: _ZN4zeek8analyzer3tcp23TCP_ApplicationAnalyzer17AnalyzerViolationEPKcS4_i
fatal error in /opt/zeek/share/zeek/base/init-bare.zeek, line 1: aborting after plugin errors

worker-1-1 scripts failed.
error in /opt/zeek/share/zeek/base/init-bare.zeek, line 1: cannot load plugin library /opt/zeek/lib64/zeek/plugins/packages/bro-http2//lib/mitrecnd-HTTP2.linux-x86_64.so: /opt/zeek/lib64/zeek/plugins/packages/bro-http2//lib/mitrecnd-HTTP2.linux-x86_64.so: undefined symbol: _ZN4zeek8analyzer3tcp23TCP_ApplicationAnalyzer17AnalyzerViolationEPKcS4_i
fatal error in /opt/zeek/share/zeek/base/init-bare.zeek, line 1: aborting after plugin errors

Please let me know if you need additional information to help troubleshoot the errors. Thanks!

eric-ooi commented 1 year ago

Just kidding – looks like it works again if you just reinstall the package! Hopefully this note helps anyone who is in the same boat. Thanks again for this awesome Zeek package!