# HTTP2 Analyzer Plugin

**URL:** <https://community.zeek.org/t/http2-analyzer-plugin/7937>\
**Category:** Zeek\
**Tags:** development\
**Created:** [January 16, 2026, 1:56pm UTC](https://community.zeek.org/t/http2-analyzer-plugin/7937 "2026-01-16T13:56:49Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![georgio](https://avatars.discourse-cdn.com/v4/letter/g/b5ac83/32.png) [@georgio](https://community.zeek.org/u/georgio)\
**Post date:** [January 16, 2026, 1:56pm UTC](https://community.zeek.org/t/http2-analyzer-plugin/7937/1 "2026-01-16T13:56:49Z")

</div>

Hey there,

I tried to install the HTTP2 analyzer [GitHub - MITRECND/bro-http2: Plugin for Zeek/Bro which provides http2 decoder/analyzer](https://github.com/MITRECND/bro-http2)

But i get this error **line 181: identifier not defined: http2\_stream\_stat**

The problem is here

event http2\_stream\_end(c: connection, stream: count, stats: http2\_stream\_stat) &priority=5  
{  
c$http2\_streams$streams[stream]$request\_body\_len = stats$request\_body\_length;  
c$http2\_streams$streams[stream]$response\_body\_len = stats$response\_body\_length;  
Log::write(HTTP2::LOG, c$http2\_streams$streams[stream]);  
delete c$http2\_streams$streams[stream];  
delete c$http2\_streams$has\_data[stream];  
}

I tried in many ways, is someone here who can help me or had the same issue,

Also after installation when i run **“zeek -NN mitrecnd::HTTP2”** I didn’t see any http2 Event, that means that the module is not installed properly ?

Thanks and see you in March in Geneva!

---

<div class="post-metadata">

**Author:** ![Benjamin\_Bannier](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/benjamin_bannier/32/595_2.png) [@Benjamin\_Bannier](https://community.zeek.org/u/Benjamin_Bannier)\
**Post date:** [January 16, 2026, 3:36pm UTC](https://community.zeek.org/t/http2-analyzer-plugin/7937/2 "2026-01-16T15:36:19Z")

</div>

That error does not reproduce for me with what is in that archived repo. After I fixed its trivial C++ compilation errors (use `std::string` instead of `string`) it passes the test suite with zeek-8.1 for me.

Usually a good place to get more help about a package would be its GH repo, but the whole org has been archived by GH administrators. I am unsure what this implies for deploying this package as is in production.

---

<div class="post-metadata">

**Author:** ![georgio](https://avatars.discourse-cdn.com/v4/letter/g/b5ac83/32.png) [@georgio](https://community.zeek.org/u/georgio)\
**Post date:** [January 23, 2026, 8:51am UTC](https://community.zeek.org/t/http2-analyzer-plugin/7937/3 "2026-01-23T08:51:53Z")

</div>

Thanks Benjamin, the problem was about the installation, so I followed these steps

`zkg install https://github.com/MITRECND/bro-http2`

`zkg install zeek/mitrecnd/bro-http2`

Both of them and then worked, also now **“`zeek -NN mitrecnd::HTTP2`” is working**

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [March 17, 2026, 1:57pm UTC](https://community.zeek.org/t/http2-analyzer-plugin/7937/4 "2026-03-17T13:57:37Z")

</div>

This topic was automatically closed after 60 days. New replies are no longer allowed.