<div dir="ltr">Hi all,<div><br></div><div>I&#39;ve been making use of this script i found online to generate ARP logs:</div><div><br></div><div><a href="https://gist.github.com/grigorescu/a28b814a8fb626e2a7b4715d278198aa">https://gist.github.com/grigorescu/a28b814a8fb626e2a7b4715d278198aa</a><br></div><div><br></div><div><br></div><div>As i&#39;ve been testing the script i noticed sometimes the PCAPs have lines that the script can&#39;t process, and I get these lines as output:<br><br></div><div>1550819487.247128 expression error in /usr/local/zeek/share/zeek/base/protocols/arp/./arp_main.zeek, line 206: no such index (ARP::arp_states[ARP::THA])<br>1550819487.247129 expression error in /usr/local/zeek/share/zeek/base/protocols/arp/./arp_main.zeek, line 206: no such index (ARP::arp_states[ARP::THA])<br>1550819487.750980 expression error in /usr/local/zeek/share/zeek/base/protocols/arp/./arp_main.zeek, line 206: no such index (ARP::arp_states[ARP::THA])<br>1550819487.750981 expression error in /usr/local/zeek/share/zeek/base/protocols/arp/./arp_main.zeek, line 206: no such index (ARP::arp_states[ARP::THA])<br>1550819489.150965 expression error in /usr/local/zeek/share/zeek/base/protocols/arp/./arp_main.zeek, line 206: no such index (ARP::arp_states[ARP::THA])<br>1550819489.150966 expression error in /usr/local/zeek/share/zeek/base/protocols/arp/./arp_main.zeek, line 206: no such index (ARP::arp_states[ARP::THA])<br></div><div><br></div><div><br></div><div>This is an example packet that causes this type of behavior:</div><div><a href="https://packettotal.com/app/analysis?id=ccdd36227128010cf7e85f6a452fabbd">https://packettotal.com/app/analysis?id=ccdd36227128010cf7e85f6a452fabbd</a><br></div><div><br></div><div>If anyone has any idea how to correct this behavior, any help would be appreciated. </div><div><br></div><div>Thank you. </div></div>