# Error installing af\_packet plugin for Zeek 3.0.11

**URL:** <https://community.zeek.org/t/error-installing-af-packet-plugin-for-zeek-3-0-11/6265>\
**Category:** Zeek\
**Created:** [November 9, 2020, 9:03am UTC](https://community.zeek.org/t/error-installing-af-packet-plugin-for-zeek-3-0-11/6265 "2020-11-09T09:03:39Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![clopmz](https://avatars.discourse-cdn.com/v4/letter/c/ebca7d/32.png) [@clopmz](https://community.zeek.org/u/clopmz)\
**Post date:** [November 9, 2020, 9:03am UTC](https://community.zeek.org/t/error-installing-af-packet-plugin-for-zeek-3-0-11/6265/1 "2020-11-09T09:03:39Z")

</div>

Hi all,

I’m trying to install a new server with Zeek 3.0.11 under RHEL8 and when I try to install the af\_packet plugin I get the following error:

scripts.show-plugin … failed

% ‘btest-diff output’ failed unexpectedly (exit code 1)

% cat .diag

== File ===============================

== Diff ===============================

— /tmp/test-diff.37542.output.baseline.tmp 2020-11-09 08:58:38.353727203 +0000

+++ /tmp/test-diff.37542.output.tmp 2020-11-09 08:58:38.347727173 +0000

@@ -1,10 +0,0 @@

-Zeek::AF\_Packet - Packet acquisition via AF\_Packet (dynamic, version)

- [Packet Source] AF\_PacketReader (interface prefix “af\_packet”; supports live input)

- [Type] AF\_Packet::FanoutMode

- [Constant] AF\_Packet::buffer\_size

- [Constant] AF\_Packet::enable\_hw\_timestamping

- [Constant] AF\_Packet::enable\_fanout

- [Constant] AF\_Packet::enable\_defrag

- [Constant] AF\_Packet::fanout\_mode

- [Constant] AF\_Packet::fanout\_id

---

<div class="post-metadata">

**Author:** ![Vlad\_Grigorescu](https://avatars.discourse-cdn.com/v4/letter/v/a3d4f5/32.png) [@Vlad\_Grigorescu](https://community.zeek.org/u/Vlad_Grigorescu)\
**Post date:** [November 9, 2020, 3:55pm UTC](https://community.zeek.org/t/error-installing-af-packet-plugin-for-zeek-3-0-11/6265/2 "2020-11-09T15:55:39Z")

</div>

The diff in the test failure is because Zeek failed to load the plugin. I’m guessing this is due to the non-standard install location. Did you run “zkg autoconfig?” Can you provide your zkg configuration file, ~/.zkg/zkg.conf as whatever user you tried running zkg?

–Vlad

---

<div class="post-metadata">

**Author:** ![clopmz](https://avatars.discourse-cdn.com/v4/letter/c/ebca7d/32.png) [@clopmz](https://community.zeek.org/u/clopmz)\
**Post date:** [November 9, 2020, 4:01pm UTC](https://community.zeek.org/t/error-installing-af-packet-plugin-for-zeek-3-0-11/6265/3 "2020-11-09T16:01:23Z")

</div>

Uhmm … I have the same config in another RHEL8 host and works without problems:

zeek@rhelzeek05:~/.zkg$ ls -al

total 8

drwxr-xr-x. 8 zeek idps 133 Nov 9 15:49 .

drwx------. 7 zeek idps 167 Nov 9 15:48 …

drwxr-xr-x. 4 zeek idps 35 Nov 9 15:48 clones

-rw-r–r–. 1 zeek idps 205 Nov 9 15:59 config

drwxr-xr-x. 2 zeek idps 45 Nov 9 15:49 logs

-rw-r–r–. 1 zeek idps 164 Nov 9 15:49 manifest.json

drwxr-xr-x. 2 zeek idps 6 Nov 9 15:49 plugin\_dir

drwxr-xr-x. 4 zeek idps 48 Nov 9 15:51 scratch

drwxr-xr-x. 2 zeek idps 6 Nov 9 15:49 script\_dir

drwxr-xr-x. 3 zeek idps 35 Nov 9 15:50 testing

zeek@ rhelzeek05:~/.zkg$ more config

[sources]

zeek = [https://github.com/zeek/packages](https://github.com/zeek/packages)

[paths]

state\_dir = /nsm/zeek/.zkg

script\_dir = /opt/zeek/share/zeek/site

plugin\_dir = /opt/zeek/lib/zeek/plugins

zeek\_dist = /usr/local/src/zeek-3.0.11

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:47pm UTC](https://community.zeek.org/t/error-installing-af-packet-plugin-for-zeek-3-0-11/6265/4 "2022-05-06T15:47:30Z")

</div>

Closed on May 6, 2022, 3:47pm UTC