# ShellShock Detector for Bro

**URL:** https://community.zeek.org/t/shellshock-detector-for-bro/3293
**Category:** Zeek
**Created:** [September 29, 2014, 6:11pm UTC](https://community.zeek.org/t/shellshock-detector-for-bro/3293 "2014-09-29T18:11:54Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![Alec\_Dhuse](https://avatars.discourse-cdn.com/v4/letter/a/838e76/32.png) [@Alec\_Dhuse](https://community.zeek.org/u/Alec_Dhuse)
#### Post date: [September 29, 2014, 6:11pm UTC](https://community.zeek.org/t/shellshock-detector-for-bro/3293/1 "2014-09-29T18:11:54Z")

</div>

Hi everyone, I’m trying to get the ShellShock Detector for Bro ([https://github.com/broala/bro-shellshock](https://github.com/broala/bro-shellshock)) installed. Currently I have the files on my Bro box and the config updated. But when I try to check the script I get an error with an unrelated library, see below:

$ ./broctl check  
manager failed.  
error in /…/bro/share/bro/base/frameworks/sumstats/./main.bro, line 191 and /…/bro/share/bro/base/frameworks/sumstats/./plugins/./average.bro, line 17: incompatible types (hook(r:record { stream:string; apply:set[enum]; pred:function(key:record { str:string; host:addr; }; obs:record { num:count; dbl:double; str:string; }😉 : bool; normalize\_key:function(key:record { str:string; host:addr; }😉 : record { str:string; host:addr; }; sid:string; }; val:double; data:record { num:count; dbl:double; str:string; }; rv:record { begin:time; end:time; num:count; average:double; }😉 : bool and hook(r:record { stream:string; apply:set[enum]; pred:function(key:record { str:string; host:addr; }; obs:record { num:count; dbl:double; str:string; }😉 : bool; normalize\_key:function(key:record { str:string; host:addr; }😉 : record { str:string; host:addr; }; sid:string; }; val:double; obs:record { num:count; dbl:double; str:string; }; rv:record { begin:time; end:time; num:count; average:double; }😉 : bool)  
proxy-1 failed.

I’m stuck at this point, so any help is appreciated.

Thanks!

- Alec

---

<div class="post-metadata">

### Author: ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)
#### Post date: [May 6, 2022, 3:42pm UTC](https://community.zeek.org/t/shellshock-detector-for-bro/3293/2 "2022-05-06T15:42:06Z")

</div>