[Zeek] Zeek and Broker versions.

[Mike Dopheide]

James,

While I haven't specifically tried to debug a situation such as yours, this
may be an avenue to try if you're building zeek from source:

1) Add  *--enable-debug to your configure flags.*
*2) Then you can run zeek with "-B broker" either on the command line or by
adding that to ZeekArgs in zeekctl.cfg.*
*3) Now you should see debug.log getting created.*


*-Dop*


On Thu, Feb 6, 2020 at 4:17 PM James Hughes <japhughe at ucsc.edu> wrote:

> Hello Zeek community:
>
> I am new to this list and would like help debugging a connection from Zeek
> 3.0.1 to a machine running a broker python application. Broker is locally
> compiled version 1.2.4. This setup used to work, but now we have upgraded
> to 3.0.1 and it is no longer working.
>
> The symptoms are that Zeek is connecting and disconnecting from the
> machine running Broker. I am guessing it is a version miss match but I do
> not know how to diagnose this. (If there are logs, I don't know where they
> might be.) Any hints would be appreciated.
>
> Thanks in advance.
>
> Sincerely
>
> Jim
> '
>
>
> _______________________________________________
> Zeek mailing list
> zeek at zeek.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20200206/289de457/attachment-0001.html