[Zeek] Some error in kerberos log

Carlos Lopez clopmz at outlook.com
Thu Apr 16 23:40:04 PDT 2020


Many thanks Jon.

On 16/04/2020, 21:43, "Jon Siwek" <jsiwek at corelight.com> wrote:

    On Thu, Apr 16, 2020 at 9:18 AM Carlos Lopez <clopmz at outlook.com> wrote:

    > /opt/zeek/share/zeek/base/protocols/krb/./main.zeek, line 175 2020-04-16T14:37:05.530502Z Reporter::ERROR no such index (KRB::cipher_name[KRB::msg$ticket$cipher])
    >
    > What does it matter? I am using Zeek 3.0.5 …

    Thanks for reporting that, it's a bug that could cause some incorrect
    analysis/processing of the associated connection or even minor memory
    leak over time in that Zeek version.  Proposed patch is on the way
    here:

        https://github.com/zeek/zeek/pull/918

    - Jon




More information about the Zeek mailing list