[Bro] Bro beta install

James Lay jlay at slave-tothe-box.net
Mon Nov 12 11:52:19 PST 2018


Wow what a complete disaster this was.  Errors:

fatal error in /usr/local/bro/share/bro/base/init-bare.bro, line 1: 
cannot load plugin library 
/usr/local/bro/lib/bro/plugins/packages/Bro_AF_Packet//lib/Bro-AF_Packet.linux-x86_64.so: 
/usr/local/bro/lib/bro/plugins/packages/Bro_AF_Packet//lib/Bro-AF_Packet.linux-x86_64.so: 
undefined symbol: 
_ZN6plugin6Plugin12HookLoadFileERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEES8_

warning in /usr/local/bro/share/bro/policy/protocols/smb/__load__.bro, 
line 1: deprecated script loaded from 
/usr/local/bro/share/bro/site/local.bro:98 "Use '@load 
base/protocols/smb' instead"

error in 
/usr/local/bro/share/bro/base/bif/plugins/./Bro_SSL.events.bif.bro, line 
41 and /usr/local/bro/share/bro/site/packages/./ja3/./ja3.bro, line 118: 
incompatible types (event(c:connection; version:count; 
record_version:count; possible_ts:tme; client_random:string; 
session_id:string; ciphers:vector of count; comp_methods:vector of 
count;) and event(c:connection; version:count; possible_ts:time; 
client_random:string; session_id:string; ciphers:vector of count;))

and my redef line below:
redef Communication::listen_interface = 127.0.0.1;

gets me:
error in /usr/local/bro/share/bro/site/local.bro, line 102: "redef" used 
but not previously defined (Communication::listen_interface)

reverted back to 2.5.5 now....yeesh.

James


More information about the Bro mailing list