Closed initconf closed 3 months ago
Unable to duplicate. If an example pcap showing the behavior could be provided, that would be great.
Test Environment Configuration:
$ git clone git@github.com:cisagov/icsnpp-bacnet.git
$ docker pull zeek/zeek:6.0.1
Inside the docker container within the icsnpp-bacnet directory:
$ apt install cmake build-essential libssl-dev libpcap-dev
$ ./configure
$ make
$ export ZEEK_PLUGIN_PATH=$PWD/build/
$ zeek -N // Verify the Bacnet plugin was found
$ cd tests
$ btest // All test pass
Closing. Unable to duplicate.
🐛 Summary
I enabled the ICSNPP::BACnet - BACnet Protocol analyzer (dynamic, version 1.4.0) on zeek-6.0.1 and since I have started seeing workers crashing with segfault.
To reproduce
I don't yet have pcap but I think I can collect a few to see if I can help reproduce this crash.
Here is the coredump
Coredump pointer for future: ~zeek/post-terminate-worker-2024-01-12-16-10-00-71290-crash