ShellShock Detector for Bro

Hi everyone, I’m trying to get the ShellShock Detector for Bro (https://github.com/broala/bro-shellshock) installed. Currently I have the files on my Bro box and the config updated. But when I try to check the script I get an error with an unrelated library, see below:

$ ./broctl check
manager failed.
error in /…/bro/share/bro/base/frameworks/sumstats/./main.bro, line 191 and /…/bro/share/bro/base/frameworks/sumstats/./plugins/./average.bro, line 17: incompatible types (hook(r:record { stream:string; apply:set[enum]; pred:function(key:record { str:string; host:addr; }; obs:record { num:count; dbl:double; str:string; }:wink: : bool; normalize_key:function(key:record { str:string; host:addr; }:wink: : record { str:string; host:addr; }; sid:string; }; val:double; data:record { num:count; dbl:double; str:string; }; rv:record { begin:time; end:time; num:count; average:double; }:wink: : bool and hook(r:record { stream:string; apply:set[enum]; pred:function(key:record { str:string; host:addr; }; obs:record { num:count; dbl:double; str:string; }:wink: : bool; normalize_key:function(key:record { str:string; host:addr; }:wink: : record { str:string; host:addr; }; sid:string; }; val:double; obs:record { num:count; dbl:double; str:string; }; rv:record { begin:time; end:time; num:count; average:double; }:wink: : bool)
proxy-1 failed.

I’m stuck at this point, so any help is appreciated.

Thanks!

  • Alec