# Reporter.log problem with NetControl

**URL:** <https://community.zeek.org/t/reporter-log-problem-with-netcontrol/6169>\
**Category:** Zeek\
**Created:** [July 2, 2020, 3:50pm UTC](https://community.zeek.org/t/reporter-log-problem-with-netcontrol/6169 "2020-07-02T15:50:24Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Davide\_Robusto](https://avatars.discourse-cdn.com/v4/letter/d/3d9bf3/32.png) [@Davide\_Robusto](https://community.zeek.org/u/Davide_Robusto)\
**Post date:** [July 2, 2020, 3:50pm UTC](https://community.zeek.org/t/reporter-log-problem-with-netcontrol/6169/1 "2020-07-02T15:50:24Z")

</div>

Is it possible to disable the reporter.log of the Netcontrol Framework?  
My problem is that when I start a broker communication with a python software, I can make the communication and also actually carry out the command requested in the message. The problem is that the reporter.log is created with the following message:  
"

- 1593701753.778553 Reporter :: WARNING failed to convert remote event ‘NetControl :: rule\_added’ arg # 1, got vector, expected record (empty)
- 1593701853.778553 Reporter :: WARNING failed to convert remote event ‘NetControl :: rule\_expire’ arg # 1, got vector, expected record (empty)
- 1593701963.778553 Reporter :: WARNING failed to convert remote event ‘NetControl :: rule\_timeout’ arg # 1, got vector, expected record (empty)  
"

Repeated hundreds of times for each communication between Zeek and the Broker.  
For me the warning in the reporter.log actually don’t mean a real error but i want get rid of it, i want be able to have the reporter free from this error.

Thanks in advance for a future reply

---

<div class="post-metadata">

**Author:** ![JustinAzoff](https://avatars.discourse-cdn.com/v4/letter/j/13edae/32.png) [@JustinAzoff](https://community.zeek.org/u/JustinAzoff)\
**Post date:** [July 6, 2020, 4:44pm UTC](https://community.zeek.org/t/reporter-log-problem-with-netcontrol/6169/2 "2020-07-06T16:44:20Z")

</div>

Hmm, that looks like something that needs to be fixed. None of the  
events that are being sent back from the client are being received  
properly. You could just ignore those messages, but fixing the events  
will make all the features work properly and stop the messages.

What version of everything are you using?

---

<div class="post-metadata">

**Author:** ![Davide\_Robusto](https://avatars.discourse-cdn.com/v4/letter/d/3d9bf3/32.png) [@Davide\_Robusto](https://community.zeek.org/u/Davide_Robusto)\
**Post date:** [July 7, 2020, 7:08am UTC](https://community.zeek.org/t/reporter-log-problem-with-netcontrol/6169/3 "2020-07-07T07:08:32Z")

</div>

Hi, first of all thanks.  
I have zeek at version 3.0.6  
Broker library at version v1.2.4 (tag) and I compiled and installed the package for python ver. 3.7.  
My comunication with zeek is between a “Broker” that is the python code on a different machines where zeek run, meanwhile zeek is the client on the comunication.  
The problem is that i can’t Debug what zeek want as a response when send the first command and so on. The reporter it’s really strange whit that sentence because if i’m not wrong there isn’t a type for record in python. In the end when i start the whole system when zeek and the python code excange the messages, all the comunication work so i don’t really understeand why the reporter go wild.

---

<div class="post-metadata">

**Author:** ![JustinAzoff](https://avatars.discourse-cdn.com/v4/letter/j/13edae/32.png) [@JustinAzoff](https://community.zeek.org/u/JustinAzoff)\
**Post date:** [July 7, 2020, 12:26pm UTC](https://community.zeek.org/t/reporter-log-problem-with-netcontrol/6169/4 "2020-07-07T12:26:42Z")

</div>

Are you using the zeek-netcontrol package or just broker directly?  
Looking how that library does things, sending a message to broker  
should look something like this:

&nbsp;&nbsp;&nbsp;&nbsp;args = [broker.Count(pluginid), rawrule, msg]  
&nbsp;&nbsp;&nbsp;&nbsp;ev = broker.zeek.Event("NetControl::broker\_rule\_added", \*args)  
&nbsp;&nbsp;&nbsp;&nbsp;endpoint.publish(queuename, ev)

or just written out as

&nbsp;&nbsp;&nbsp;&nbsp;ev = broker.zeek.Event("NetControl::broker\_rule\_added",  
broker.Count(pluginid), rawrule, msg)  
&nbsp;&nbsp;&nbsp;&nbsp;endpoint.publish(queuename, ev)

---

<div class="post-metadata">

**Author:** ![Davide\_Robusto](https://avatars.discourse-cdn.com/v4/letter/d/3d9bf3/32.png) [@Davide\_Robusto](https://community.zeek.org/u/Davide_Robusto)\
**Post date:** [July 7, 2020, 12:45pm UTC](https://community.zeek.org/t/reporter-log-problem-with-netcontrol/6169/5 "2020-07-07T12:45:03Z")

</div>

I’m using the netcontrol package but what i need to send is the " response " to the client that already had sent a message to the broker.  
Zeek it’s the client, send a message to the broker and here the broker do the action asked from Zeek and respond with the status of the command executed.  
Maybe the problem is in the response that i send from the broker to zeek in the python code ?

---

<div class="post-metadata">

**Author:** ![JustinAzoff](https://avatars.discourse-cdn.com/v4/letter/j/13edae/32.png) [@JustinAzoff](https://community.zeek.org/u/JustinAzoff)\
**Post date:** [July 7, 2020, 12:55pm UTC](https://community.zeek.org/t/reporter-log-problem-with-netcontrol/6169/6 "2020-07-07T12:55:56Z")

</div>

Sorry, i meant this specifically: [https://github.com/zeek/zeek-netcontrol](https://github.com/zeek/zeek-netcontrol)

That project has some python code for how to receive and respond to  
the netcontrol events. Not sure if you are using that or if you are  
using broker directly.

The problem is definitely the response being sent from broker back to  
zeek.. it's expecting one type of message but getting a different one.

---

<div class="post-metadata">

**Author:** ![Davide\_Robusto](https://avatars.discourse-cdn.com/v4/letter/d/3d9bf3/32.png) [@Davide\_Robusto](https://community.zeek.org/u/Davide_Robusto)\
**Post date:** [July 7, 2020, 1:06pm UTC](https://community.zeek.org/t/reporter-log-problem-with-netcontrol/6169/7 "2020-07-07T13:06:41Z")

</div>

Yeah it’s this one that i’m using on the python.  
But exactly for tell to Netcontrol that the rule that he sent ( and wait a response ) it’s added correctly ?

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:47pm UTC](https://community.zeek.org/t/reporter-log-problem-with-netcontrol/6169/8 "2022-05-06T15:47:20Z")

</div>


