Re: Seek error when I try to use zeekctl command

"Seth Hall" <[email protected]> Thu, 31 Oct 2019 08:13:17 -0400
Newsgroups gmane.comp.security.detection.bro
Message-ID <[email protected]>
It's possible that a plugin you have installed from the package manager 
or manually contained a zeekctl/broctl plugin and hasn't been updated 
for Zeek 3.0 yet.  Take a look in /usr/local/bro/lib/zeekctl/plugins to 
see what's there and if one of the plugins there is using BroControl.  
If you find something in there using the BroControl API you could then 
go and file a ticket with the plugin that is causing the issue! :)

   .Seth

On 20 Oct 2019, at 9:44, Carlos Lopez wrote:

> Yep, you are right Ericooi … There was an error in my nodes.cfg … 
> Now, it is solved. Many thanks.
>
> On the other side, this:
>
> Warning: ZeekControl plugin uses legacy BroControl API. Use
> 'import ZeekControl.plugin' instead of 'import BroControl.plugin'
>
> .. appears every time zeekctl runs …
>
> --
> Regards,
> C. L. Martinez
>
> From: "[email protected]" <[email protected]>
> Date: Sunday, 20 October 2019 at 15:40
> To: Carlos Lopez <[email protected]>
> Cc: "[email protected]" <[email protected]>
> Subject: Re: [Zeek] Seek error when I try to use zeekctl command
>
> I run Zeek 3.0 on CentOS 8 and I also get this warning, though the 
> error seems to suggest there’s an issue with your 
> /opt/zeek/etc/node.cfg file.
>
>
> On Oct 20, 2019, at 8:17 AM, Carlos Lopez 
> <[email protected]<mailto:[email protected]>> wrote:
>
> Hi all,
>
> I have doing a clean install on RHEL8 host with Zeek 3.0.0. When I try 
> to use any zeekctl option, it returns the following error:
>
> root@rhel8host:~# zeekctl help
>
> Warning: ZeekControl plugin uses legacy BroControl API. Use
> 'import ZeekControl.plugin' instead of 'import BroControl.plugin'
>
> Error: no type given for node zeek
>
> Maybe the problem is with python3 that comes with RHEL8? Any idea?
>
> --
> Regards,
> C. L. Martinez
> _______________________________________________
> Zeek mailing list
> [email protected]<mailto:[email protected]>
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek<http://mailman.icsi.berkeley.edu/mailman/listinfo/zeek>
>
>
> _______________________________________________
> Zeek mailing list
> [email protected]
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek

--
Seth Hall * Corelight, Inc * www.corelight.com

_______________________________________________
Zeek mailing list
[email protected]
http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek