Colleagues, I’m just starting to master Zeek and I apologize for the variety of questions.
Our good friend from the first chapter of the Book of Genesis, instead of crawling in with a package of paradise apples, sent an email.
In it he hissed the following with displeasure:
Traceback (most recent call last):
File "/usr/local/bin/trace-summary", line 1115, in <module>
readConnSummaries(file)
File "/usr/local/bin/trace-summary", line 508, in readConnSummaries
parseConnLine(line, field_sep, unset_field, idx, max_idx_1, is_json, scope_separator)
File "/usr/local/bin/trace-summary", line 844, in parseConnLine
LocalNetsIntervals[iupdate.src_ip].update(iupdate)
~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^
File "/usr/local/lib/zeek/python/SubnetTree.py", line 103, in __getitem__
return _SubnetTree.SubnetTree___getitem__(self, cidr)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
UnicodeDecodeError: 'utf-8' codec can't decode byte 0xd9 in position 0: invalid continuation byte
0,06 real 0,05 user 0,00 sys
--
[Automatically generated.]
I installed Zeek from FreeBSD ports, and in theory, all the necessary modules should have compiled.
What’s unhappy about this scaly reptile?
Thanks in advance for your advice,
Ogogon.