Re: Seek error when I try to use zeekctl command
"Seth Hall" <[email protected]> Thu, 31 Oct 2019 08:13:17 -0400
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <[email protected]> |
It's possible that a plugin you have installed from the package manager or manually contained a zeekctl/broctl plugin and hasn't been updated for Zeek 3.0 yet. Take a look in /usr/local/bro/lib/zeekctl/plugins to see what's there and if one of the plugins there is using BroControl. If you find something in there using the BroControl API you could then go and file a ticket with the plugin that is causing the issue! :) .Seth On 20 Oct 2019, at 9:44, Carlos Lopez wrote: > Yep, you are right Ericooi … There was an error in my nodes.cfg … > Now, it is solved. Many thanks. > > On the other side, this: > > Warning: ZeekControl plugin uses legacy BroControl API. Use > 'import ZeekControl.plugin' instead of 'import BroControl.plugin' > > .. appears every time zeekctl runs … > > -- > Regards, > C. L. Martinez > > From: "[email protected]" <[email protected]> > Date: Sunday, 20 October 2019 at 15:40 > To: Carlos Lopez <[email protected]> > Cc: "[email protected]" <[email protected]> > Subject: Re: [Zeek] Seek error when I try to use zeekctl command > > I run Zeek 3.0 on CentOS 8 and I also get this warning, though the > error seems to suggest there’s an issue with your > /opt/zeek/etc/node.cfg file. > > > On Oct 20, 2019, at 8:17 AM, Carlos Lopez > <[email protected]<mailto:[email protected]>> wrote: > > Hi all, > > I have doing a clean install on RHEL8 host with Zeek 3.0.0. When I try > to use any zeekctl option, it returns the following error: > > root@rhel8host:~# zeekctl help > > Warning: ZeekControl plugin uses legacy BroControl API. Use > 'import ZeekControl.plugin' instead of 'import BroControl.plugin' > > Error: no type given for node zeek > > Maybe the problem is with python3 that comes with RHEL8? Any idea? > > -- > Regards, > C. L. Martinez > _______________________________________________ > Zeek mailing list > [email protected]<mailto:[email protected]> > http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek<http://mailman.icsi.berkeley.edu/mailman/listinfo/zeek> > > > _______________________________________________ > Zeek mailing list > [email protected] > http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek -- Seth Hall * Corelight, Inc * www.corelight.com _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek