I have deployed zeek in cluster mode with PF_RING and it works fine at first. After few days the zeek got crashed and not generating the necessary logs. The status command gives the below result,
Warning: zeekctl config has changed (run the zeekctl “deploy” command)
Getting process status …
Getting peer status …
Name Type Host Status Pid Peers Started
manager manager localhost terminating 61772 ??? 14 Oct 07:04:51
proxy-1 proxy localhost crashed
worker-1-1 worker localhost stopped
worker-1-2 worker localhost stopped
worker-1-3 worker localhost stopped
worker-1-4 worker localhost stopped
worker-1-5 worker localhost stopped
worker-1-6 worker localhost stopped
worker-1-7 worker localhost stopped
worker-1-8 worker localhost stopped
When I checked with the diag command, it shows as follows in the proxy process,
error in /opt/zeek/share/zeek/base/frameworks/cluster/./setup-connections.zeek, lines 94-96: Failed to listen on INADDR_ANY:47762 (Broker::listen(Broker::default_listen_address, Cluster::self$p, Broker::default_listen_retry))
fatal error: errors occurred while initializing
I am not able to either stop or restart the zeek to resolve the issue. Can anybody share the solution?