Skip to content

zeek update fails when updating from a v4 docker-zeek container or less to v6 due to an incompatibility in the ja3.zeek script #45

@tdwoje

Description

@tdwoje

zeek update fails when updating from a v4 docker-zeek container to v6/latest due to incompatibility code logic in the ja3.zeek script here: /var/lib/docker/volumes/zeek-zkg-script/_data/ja3. The docker container uses to the volume zeek-zkg-script to mount the location of added scripts, to include ja3.zeek. PR was submitted which includes a command in the zeek script to remove the volume prior to starting an updated container. This ensures that the updated container gets the fixed ja3.zeek script which is compatible with Zeek v5.2 and above.

ja3.zeek issue: salesforce/ja3#87
PR: #44

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions