# bro: pcap\_complile: parse error

**URL:** https://community.zeek.org/t/bro-pcap-complile-parse-error/59
**Category:** Zeek
**Created:** [October 5, 1999, 2:19pm UTC](https://community.zeek.org/t/bro-pcap-complile-parse-error/59 "1999-10-05T14:19:15Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![Joey\_McAlerney](https://avatars.discourse-cdn.com/v4/letter/j/41988e/32.png) [@Joey\_McAlerney](https://community.zeek.org/u/Joey_McAlerney)
#### Post date: [October 5, 1999, 2:19pm UTC](https://community.zeek.org/t/bro-pcap-complile-parse-error/59/1 "1999-10-05T14:19:15Z")

</div>

Hello,

I am having some trouble tracking down the source of this error. It  
occurs when I run Bro 0.6 like so:

bro-pub-0.6% bro -f "myFilter" -i lo mt  
bro: pcap\_compile: parse error  
bro-pub-0.6%

The parse error is coming from libpcap's grammar.c, but the reason for  
the parse error is unknown. The contents of "myFilter" is the standard  
filter that was described in the README of Bro 06. I have tried many  
other simple filters, but none seem to work. Bro will run without the  
-f option, but of course, it won't pick anything up. Can anyone explain  
what is going on, or suggest a place I could try looking? Thank you  
very much for any help.

---

<div class="post-metadata">

### Author: ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)
#### Post date: [May 6, 2022, 3:36pm UTC](https://community.zeek.org/t/bro-pcap-complile-parse-error/59/2 "2022-05-06T15:36:07Z")

</div>


