# Live capture configuration

**URL:** https://community.zeek.org/t/live-capture-configuration/5951
**Category:** Zeek
**Created:** [December 25, 2019, 3:32pm UTC](https://community.zeek.org/t/live-capture-configuration/5951 "2019-12-25T15:32:03Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![mxd6](https://avatars.discourse-cdn.com/v4/letter/m/a87d85/32.png) [@mxd6](https://community.zeek.org/u/mxd6)
#### Post date: [December 25, 2019, 3:32pm UTC](https://community.zeek.org/t/live-capture-configuration/5951/1 "2019-12-25T15:32:03Z")

</div>

I’m trying to setup my ZEEK system to do both MODBUS and DNP3 live capture on the network. When I include the following statements into my local.zeek file it fails on deployment with the error “fatal error in …/…/…/local.zeek. Can’t find protocols/modbus/software”

Here is my load statements in local.zeek:

@load protocols/modbus/software  
@load protocols/dnp3/software

Any suggestion or examples on configurations for live capture for these two protocols?

Any help would be greatly appreciated!

---

<div class="post-metadata">

### Author: ![JustinAzoff](https://avatars.discourse-cdn.com/v4/letter/j/13edae/32.png) [@JustinAzoff](https://community.zeek.org/u/JustinAzoff)
#### Post date: [December 26, 2019, 2:05pm UTC](https://community.zeek.org/t/live-capture-configuration/5951/2 "2019-12-26T14:05:22Z")

</div>

Those scripts don’t actually exist, only a few protocols have the ‘software’ scripts;

scripts/policy/protocols/ftp/software.zeek  
scripts/policy/protocols/ssh/software.zeek  
scripts/policy/protocols/http/software-browser-plugins.zeek  
scripts/policy/protocols/http/software.zeek  
scripts/policy/protocols/smtp/software.zeek  
scripts/policy/protocols/mysql/software.zeek  
scripts/policy/protocols/dhcp/software.zeek

The default scripts/base/init-default.zeek already contains the @load statements for the base dnp3 and modbus scripts;

@load base/protocols/dnp3  
@load base/protocols/modbus

so you shouldn’t have to do any configuration to analyze these protocols.

---

<div class="post-metadata">

### Author: ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)
#### Post date: [May 6, 2022, 3:46pm UTC](https://community.zeek.org/t/live-capture-configuration/5951/3 "2022-05-06T15:46:58Z")

</div>


