Zeekctl crashed after doing zeekctl "Install" command

Development
1

Hello Zeek Community!

Earlier today, I did the zeekctl Install command to update/Install Zeek configuration. After doing the command, zeek got crashed and I couldn’t solve the issue regarding it. Find my diag of the crash below:

Zeek plugins: (none found)

==== No reporter.log

==== stderr.log
error in /usr/local/zeek/share/zeek/policy/frameworks/control/controllee.zeek, line 13: syntax error, at or near "module"

==== stdout.log
max memory size         (kbytes, -m) unlimited
data seg size           (kbytes, -d) unlimited
virtual memory          (kbytes, -v) unlimited
core file size          (blocks, -c) unlimited

==== .cmdline
-i <Interface> -U .status -p zeekctl -p zeekctl-live -p standalone -p local -p zeek local.zeek zeekctl zeekctl/standalone zeekctl/auto

==== .env_vars
PATH=/usr/local/zeek/bin:/usr/local/zeek/share/zeekctl/scripts:/usr/local/sbin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/zeek/bin::/root/bin
ZEEKPATH=/usr/local/zeek/spool/installed-scripts-do-not-touch/site::/usr/local/zeek/spool/installed-scripts-do-not-touch/auto:/usr/local/zeek/share/zeek:/usr/local/zeek/share/zeek/policy:/usr/local/zeek/share/zeek/site:/usr/local/zeek/share/zeek/builtin-plugins
CLUSTER_NODE=

==== .status
TERMINATED [atexit]

==== No prof.log

==== No packet_filter.log

==== No loaded_scripts.log

Any advice that could solve my problem?

Thanks in advance :slight_smile:

2

Hello @Timbo,

Hmm, this seems surprising. Getting a syntax error on the first module in a new file may indicate an issue in one of the @load'ed scripts. Our error reporting isn’t great here.

Which version of Zeek are you running? Any custom packages installed via zkg or otherwise? Is there a chance you’ve patched the policy/frameworks/control files in any way (or otherwise any script files in the script base distribution)?

Thanks,
Arne