Many thanks for the quick responses!

I am receiving these errors:
error in /usr/local/bro/share/bro/base/init-bare.bro, line 1: plugin
Demo::ConnTaste is not available
fatal error in /usr/local/bro/share/bro/base/init-bare.bro, line 1:
Failed to activate requested dynamic plugin(s).

After executing these commands:
git clone --recursive
cd zeek

cd aux/bro-aux/plugin-support
./init-plugin -u ./conn-taste Demo ConnTaste

cd ${DIST}
cd ../
git clone
cd binpac_quickstart
pip install docopt jinja2
./ ConnTaste "Connection Byte Offset Tasting"
${BRO_PLUGIN_PATH}/conn-taste/ --tcp --buffered --plugin

cd ${BRO_PLUGIN_PATH}/conn-taste
./configure --bro-dist=${DIST}

cd ${DIST}
make install

bro -NN Demo::ConnTaste

I'm guessing there is some environment variable I am missing as I tried zeek/testing/btest/plugins/protocol.bro as Robin suggested and the @TEST-EXEC statements worked as expected.


On Wed, Mar 13, 2019, 09:51 Vlad Grigorescu <> wrote:
On Wed, Mar 13, 2019 at 10:17 AM anthony kasza <> wrote:
However, the docs don't detail much beyond creating a built in function. A colleague pointed me at this quickstart script for binpac:

Oops! Sorry about that. Try this one:

That has a '--plugin' option. That will at least get the boilerplate stuff built, and then you can start digging into the protocol specifics.