Project

General

Profile

Actions
Copy link

Bug #15709

open

Zeek 3.0.6_4 UnicodeDecodeError utf-8 invalid continuation byte

Added by William Rolison 4 months ago.

Status:
New
Priority:
Low
Assignee:
-
Category:
Zeek
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Affected Version:
All
Affected Plus Version:
24.03
Affected Architecture:
amd64

Description

With Zeek 3.0.6_4 on Netgate 4200, 24.03, I am getting the following error emailed to me:

User-Agent: ZeekControl 2.5.0-24

Traceback (most recent call last):
  File "/usr/local/bin/trace-summary", line 1115, in <module>
    readConnSummaries(file)
  File "/usr/local/bin/trace-summary", line 508, in readConnSummaries
    parseConnLine(line, field_sep, unset_field, idx, max_idx_1, is_json, scope_separator)
  File "/usr/local/bin/trace-summary", line 844, in parseConnLine
    LocalNetsIntervals[iupdate.src_ip].update(iupdate)
    ~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^
  File "/usr/local/lib/zeek/python/SubnetTree.py", line 103, in __getitem__
    return _SubnetTree.SubnetTree___getitem__(self, cidr)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
UnicodeDecodeError: 'utf-8' codec can't decode byte 0xdc in position 2: invalid continuation byte
        0.10 real         0.10 user         0.00 sys

Only happens if Services > Zeek NSM > ZeekControl Config > "Check to mail connection summary reports each log rotation interval." is enabled.

Note: Had to pick "All" for "Affected Version" as 3.x builds are missing from the drop down.

No data to display

Actions
Copy link

Also available in: Atom PDF