[prev in list] [next in list] [prev in thread] [next in thread] 

List:       bro
Subject:    [Zeek] Errors in workers using Spicy 1.2.0
From:       Carlos Lopez <clopmz () outlook ! com>
Date:       2021-08-03 11:28:14
Message-ID: CAE540D7-7B6D-4E04-B665-3517F20E8F7A () outlook ! com
[Download RAW message or body]

[Attachment #2 (text/plain)]

Hi all,

After some problems to install spicy 1.1.0 in my Zeek cluster under FreeBSD 13-p3, \
this morning I have tried to install spicy 1.2.0 an all works as expected. Good \
work!! …

But after installing spicy-plugin and spicy-analysers and executing "zeekctl deploy" \
(only in manager side) the following error appears in all workers:

root@stirling:/nsm/zeek/spool/idps-prod # more stderr.log
error in /opt/zeek/share/zeek/base/init-bare.zeek, line 1: cannot load plugin library \
/opt/zeek/lib/zeek/plugins/packages/spicy-plugin//lib/_Zeek-Spicy.freebsd-amd64.so: \
Shared object "libhilti.so" not found, required by "_Zeek-Spicy.freebsd-amd64.so" \
fatal error in /opt/zeek/share/zeek/base/init-bare.zeek, line 1: aborting after \
plugin errors

Do I need to install spicy in all Zeek cluster components: workers, managers, \
loggers, etc?

Best regards,
C. L. Martinez


[Attachment #3 (text/html)]

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: \
after-white-space;" class=""> H<span style="caret-color: rgb(0, 0, 0); color: rgb(0, \
0, 0); font-family: Menlo-Regular; font-size: 11px;" class="">i all,</span><br \
style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Menlo-Regular; \
font-size: 11px;" class=""> <br style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, \
0); font-family: Menlo-Regular; font-size: 11px;" class=""> <span style="caret-color: \
rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 11px;" \
class="">After some problems to install spicy 1.1.0 in my Zeek cluster under FreeBSD \
13-p3, this morning I have tried to install spicy 1.2.0 an all works  as expected. \
Good work!! …</span><br style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); \
font-family: Menlo-Regular; font-size: 11px;" class=""> <br style="caret-color: \
rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 11px;" \
class=""> <span style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: \
Menlo-Regular; font-size: 11px;" class="">But after installing spicy-plugin and \
spicy-analysers and executing "zeekctl deploy" (only in manager side) the following \
error appears in all  workers:</span><br style="caret-color: rgb(0, 0, 0); color: \
rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 11px;" class=""> <br \
style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Menlo-Regular; \
font-size: 11px;" class=""> <span style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, \
0); font-family: Menlo-Regular; font-size: 11px;" \
class="">root@stirling:/nsm/zeek/spool/idps-prod # more stderr.log</span><br \
style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Menlo-Regular; \
font-size: 11px;" class=""> <span style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, \
0); font-family: Menlo-Regular; font-size: 11px;" class="">error in \
/opt/zeek/share/zeek/base/init-bare.zeek, line 1: cannot load plugin library \
/opt/zeek/lib/zeek/plugins/packages/spicy-plugin//lib/_Zeek-Spicy.freebsd-amd64.so:  \
Shared object &quot;libhilti.so&quot; not found, required by \
&quot;_Zeek-Spicy.freebsd-amd64.so&quot;</span><br style="caret-color: rgb(0, 0, 0); \
color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 11px;" class=""> <span \
style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Menlo-Regular; \
font-size: 11px;" class="">fatal error in /opt/zeek/share/zeek/base/init-bare.zeek, \
line 1: aborting after plugin errors</span><br style="caret-color: rgb(0, 0, 0); \
color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 11px;" class=""> <br \
style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Menlo-Regular; \
font-size: 11px;" class=""> <span style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, \
0); font-family: Menlo-Regular; font-size: 11px;" class="">Do I need to install spicy \
in all Zeek cluster components: workers, managers, loggers, etc?</span><br \
style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Menlo-Regular; \
font-size: 11px;" class=""> <div class=""><br class="webkit-block-placeholder">
</div>
<div class="">
<div>Best regards,</div>
<div>C. L. Martinez</div>
</div>
<br class="">
</body>
</html>



--
zeek mailing list -- zeek@lists.zeek.org
To unsubscribe send an email to zeek-leave@lists.zeek.org
--===============5705962100220723202==--

[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic