# Bro upgrades, and plugins vs. packages, and bro-pkg

**URL:** <https://community.zeek.org/t/bro-upgrades-and-plugins-vs-packages-and-bro-pkg/5566>\
**Category:** Zeek\
**Created:** [December 20, 2018, 8:55pm UTC](https://community.zeek.org/t/bro-upgrades-and-plugins-vs-packages-and-bro-pkg/5566 "2018-12-20T20:55:40Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![James\_inthe\_box](https://avatars.discourse-cdn.com/v4/letter/j/6f9a4e/32.png) [@James\_inthe\_box](https://community.zeek.org/u/James_inthe_box)\
**Post date:** [December 20, 2018, 8:55pm UTC](https://community.zeek.org/t/bro-upgrades-and-plugins-vs-packages-and-bro-pkg/5566/1 "2018-12-20T20:55:40Z")

</div>

So here we go. I've attacked this with my lab and here are some thoughts/results. Current state:

bro-2.6 installed from source (config option --prefix=/opt/bro)  
bro-af\_packet-plugin ja3 intel-seen-more domain-tld installed via bro-pkg

after upgrading to bro-2.6.1 errors like the below:

fatal error in /opt/bro/share/bro/base/init-bare.bro, line 1: cannot load plugin library /opt/bro/lib/bro/plugins/packages/bro-af\_packet-plugin//lib/Bro-AF\_Packet.linux-x86\_64.so: /opt/bro/lib/bro/plugins/packages/bro-af\_packet-plugin//lib/Bro-AF\_Packet.linux-x86\_64.so: undefined symbol: bro\_version\_2\_6\_plugin\_6

next up, remove and reinstall bro-af\_backup-plugin:

root@# bro-pkg remove bro-af\_packet-plugin  
The following packages will be REMOVED:  
&nbsp;&nbsp;&nbsp;bro/j-gras/bro-af\_packet-plugin

Proceed? [Y/n] y  
Removed "bro/j-gras/bro-af\_packet-plugin"  
root@# bro-pkg install bro-af\_packet-plugin  
The following packages will be INSTALLED:  
&nbsp;&nbsp;&nbsp;bro/j-gras/bro-af\_packet-plugin (1.3.0)

Proceed? [Y/n] y  
Running unit tests for "bro/j-gras/bro-af\_packet-plugin"  
[0%] scripts.show-plugin ... failed  
&nbsp;&nbsp;&nbsp;% 'bro -NN Bro::AF\_Packet \> output' failed unexpectedly (exit code 1)  
&nbsp;&nbsp;&nbsp;% cat .stderr  
&nbsp;&nbsp;&nbsp;fatal error in /opt/bro/share/bro/base/init-bare.bro, line 1: cannot load plugin library /root/.bro-pkg/testing/bro-af\_packet-plugin/plugins/packages/bro-af\_packet-plugin//lib/Bro-AF\_Packet.linux-x86\_64.so: /root/.bro-pkg/testing/bro-af\_packet-plugin/plugins/packages/bro-af\_packet-plugin//lib/Bro-AF\_Packet.linux-x86\_64.so: undefined symbol: bro\_version\_2\_6\_plugin\_6

1 of 1 test failed  
error: bro/j-gras/bro-af\_packet-plugin tests failed, inspect contents of /root/.bro-pkg/testing/bro-af\_packet-plugin for details  
Proceed to install anyway? [N/y] n  
Abort.

a thought occurs....modify /root/.bro-pkg/config -\> bro\_dist = /build/bro-2.6.1

all works. So long story short, the upgrade process going forward should be:

./configure, make, make install  
bro-pkg autoconfig  
bro-pkg refresh

on from there. It might be worthwhile to annotate somewhere in the README or create an UPGRADE in the tarball to reflect that bro-pkg will need some attention as well during the upgrade process. Thank you!

James

---

<div class="post-metadata">

**Author:** ![ericooi](https://avatars.discourse-cdn.com/v4/letter/e/ecae2f/32.png) [@ericooi](https://community.zeek.org/u/ericooi)\
**Post date:** [December 21, 2018, 6:04pm UTC](https://community.zeek.org/t/bro-upgrades-and-plugins-vs-packages-and-bro-pkg/5566/2 "2018-12-21T18:04:24Z")

</div>

Thanks James. The is helpful.

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:46pm UTC](https://community.zeek.org/t/bro-upgrades-and-plugins-vs-packages-and-bro-pkg/5566/3 "2022-05-06T15:46:15Z")

</div>

Closed on May 6, 2022, 3:46pm UTC


