[prev in list] [next in list] [prev in thread] [next in thread] 

List:       bro
Subject:    [Zeek] Unable to start Zeek-4.1.0 - type inconsistency in ZVal constructor
From:       Dheeraj Gupta <dheeraj.gupta4 () gmail ! com>
Date:       2021-08-13 12:51:27
Message-ID: CAOsL98NsSLObYGxFWm==EpbX1KBSN84FGNWPMh-f29vWVpXojQ () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


Hi,

I am testing Zeek-4.1.0 in preparation for an upgrade in production (from
Zeek-4.0.2). I compiled the RPM myself (using --disable-btest
--build-static-broker switches like I had done for 4.0.2).

I have a test setup on a CentOS7 machine where Zeek-4.0.2 was already
running. On upgrading the RPM to 4.1.0 and restarting zeek service all the
nodes crashed and the following was logged to the stderr.log file

internal error: type inconsistency in ZVal constructor
/opt/zeek/share/zeekctl/scripts/run-zeek: line 110: 11357 Aborted
      (core dumped) nohup "$myzeek" "$@"

I am able to run zeek against PCAPs (-r pcap) but not able to start it as a
service.

Anybody has any ideas about probable causes and/or fixes.

Thanks,
Dheeraj

[Attachment #5 (text/html)]

<div dir="ltr"><div>Hi,</div><div><br></div><div>I am testing Zeek-4.1.0 in \
preparation for an upgrade in production (from Zeek-4.0.2). I compiled the RPM myself \
(using --disable-btest --build-static-broker switches like I had done for \
4.0.2).</div><div><br></div><div>I have a test setup on a CentOS7 machine where \
Zeek-4.0.2 was already running. On upgrading the RPM to 4.1.0 and restarting zeek \
service all the nodes crashed and the following was logged to the stderr.log \
file</div><div><br></div><div>internal error: type inconsistency in ZVal \
constructor<br>/opt/zeek/share/zeekctl/scripts/run-zeek: line 110: 11357 Aborted      \
(core dumped) nohup &quot;$myzeek&quot; &quot;$@&quot;</div><div><br></div><div>I am \
able to run zeek against PCAPs (-r pcap) but not able to start it as a \
service.<br></div><div><br></div><div>Anybody has any ideas about probable causes \
and/or fixes.</div><div><br></div><div>Thanks,</div><div>Dheeraj<br></div></div>



--
zeek mailing list -- zeek@lists.zeek.org
To unsubscribe send an email to zeek-leave@lists.zeek.org

[prev in list] [next in list] [prev in thread] [next in thread]