# Gotchas for 2.5.5 to 2.6 (notes from the field)

**URL:** <https://community.zeek.org/t/gotchas-for-2-5-5-to-2-6-notes-from-the-field/5549>\
**Category:** Zeek\
**Created:** [December 5, 2018, 10:54pm UTC](https://community.zeek.org/t/gotchas-for-2-5-5-to-2-6-notes-from-the-field/5549 "2018-12-05T22:54:44Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![James\_inthe\_box](https://avatars.discourse-cdn.com/v4/letter/j/6f9a4e/32.png) [@James\_inthe\_box](https://community.zeek.org/u/James_inthe_box)\
**Post date:** [December 5, 2018, 10:54pm UTC](https://community.zeek.org/t/gotchas-for-2-5-5-to-2-6-notes-from-the-field/5549/1 "2018-12-05T22:54:44Z")

</div>

Not many. From my notes...might help someone out there. Going from non-bro-pkg to bro-pkg was the bulk of the excitement. Also if you've ran bro-pkg with sudo instead of just as root you'll have to tweak out the config file. Try as I might to bro-pkg upgrade ja3 it did not fly, but an uninstall and reinstall worked. The list of packages are ones I use, betting folks use things other than my tiny list. Thank you.

James

remove current /opt/bro/lib/bro/plugins/Bro\_AF\_Packet

update /root/.bro-pkg/config  
bro\_dist = /home/home/build/bro-2.6 \<- remained on old build dir even after config and install

remove all from local.bro  
@load packages \<- not this  
#@load packages/intel-seen-more/seen \<- these

as root:  
pip install bro-pkg  
bro-pkg refresh  
bro-pkg install bro-af\_packet-plugin  
bro-pkg remove ja3  
bro-pkg install ja3  
bro-pkg upgrade domain-tld  
bro-pkg upgrade intel-seen-more  
bro-pkg load ja3  
bro-pkg load domain-tld  
bro-pkg load intel-seen-more

---

<div class="post-metadata">

**Author:** ![seth](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/seth/32/642_2.png) [@seth](https://community.zeek.org/u/seth)\
**Post date:** [December 6, 2018, 1:51pm UTC](https://community.zeek.org/t/gotchas-for-2-5-5-to-2-6-notes-from-the-field/5549/2 "2018-12-06T13:51:51Z")

</div>

Thanks for the notes! Always helpful.

&nbsp;&nbsp;.Seth

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:46pm UTC](https://community.zeek.org/t/gotchas-for-2-5-5-to-2-6-notes-from-the-field/5549/3 "2022-05-06T15:46:13Z")

</div>