scan.bro error

Zeek
1

Hello,

I checked out and built the latest version from stable svn tree, and now startup is failing on an error from the scan.bro policy.

bro.rc: Starting ..........bro.rc: Failed to start Bro /usr/local/bro/policy/scan.bro, line 302 (): error, empty list in untyped initialization /usr/local/bro/policy/scan.bro, line 313 (): error, empty list in untyped initialization /usr/local/bro/policy/scan.bro, line 313 (&mergeable): error, &mergeable only applicable to tables/sets /usr/local/bro/policy/scan.bro, line 377 (): error, empty list in untyped initialization /usr/local/bro/policy/scan.bro, line 377 (&mergeable): error, &mergeable only applicable to tables/sets /usr/local/bro/policy/scan.bro, line 385 (): error, empty list in untyped initialization /usr/local/bro/policy/scan.bro, line 385 (&mergeable): error, &mergeable only applicable to tables/sets /usr/local/bro/policy/scan.bro, line 398 (): error, empty list in untyped initialization /usr/local/bro/policy/scan.bro, line 398 (&mergeable): error, &mergeable only applicable to tables/sets /usr/local/bro/policy/scan.bro, line 421 (): error, empty list in untyped initialization /usr/local/bro/policy/scan.bro, line 421 (&mergeable): error, &mergeable only applicable to tables/sets /usr/local/bro/policy/scan.bro, line 424 (): error, empty list in untyped initialization /usr/local/bro/policy/scan.bro, line 424 (&mergeable): error, &mergeable only applicable to tables/sets /usr/local/bro/policy/scan.bro, line 448 (): error, empty list in untyped initialization ... FAILED

I see the “set() &mergeable” notation in other policy files, and I’m not sure I see what is different in this one.

Let me know if you need more supporting info.

Thanks,

-Stephen

2

Any chance that you're mixing the bro binary with policy scripts
from a different Bro versions?

Robin

3

That is extremely possible. After building I did a make update to update my existing installation and I did notice that it didn't install a new bro binary. I just didn't think anything of it at the time. Do I need to just back up my site folder, do make install, then copy it back in?

Thanks,
Stephen

Robin Sommer wrote:

4

Yes, should work (it shouldn't touch the site policies but backing
them up is certainly recommended ...)

Robin