[Zeek] Ask for help: zeek/modbus

Jon Siwek jsiwek at corelight.com
Thu May 30 17:33:58 PDT 2019


On Thu, May 30, 2019 at 8:51 AM Salwa Alem <salwa.alem at univ-ubs.fr> wrote:

> ~/bro$ bro -r 09052019.pcap /home/salwa/bro/scripts/base/protocols/modbus/main.zeek
>
> fatal error in /home/salwa/bro/scripts/base/protocols/modbus/main.zeek, line 5: can't find ./consts

In this case, that script is loaded by default and you don't have to
specify it.  So you could just do:

     bro -r 09052019.pcap

Not sure that would explain the error though, unless you somehow do
not have a file at
/home/salwa/bro/scripts/base/protocols/modbus/consts.zeek, which
should have come as part of the source code.

- Jon


More information about the Zeek mailing list