Uhmm … I have the same config in another RHEL8 host and works without problems: zeek@rhelzeek05:~/.zkg$ ls -al total 8 drwxr-xr-x. 8 zeek idps 133 Nov 9 15:49 . drwx------. 7 zeek idps 167 Nov 9 15:48 .. drwxr-xr-x. 4 zeek idps 35 Nov 9 15:48 clones -rw-r--r--. 1 zeek idps 205 Nov 9 15:59 config drwxr-xr-x. 2 zeek idps 45 Nov 9 15:49 logs -rw-r--r--. 1 zeek idps 164 Nov 9 15:49 manifest.json drwxr-xr-x. 2 zeek idps 6 Nov 9 15:49 plugin_dir drwxr-xr-x. 4 zeek idps 48 Nov 9 15:51 scratch drwxr-xr-x. 2 zeek idps 6 Nov 9 15:49 script_dir drwxr-xr-x. 3 zeek idps 35 Nov 9 15:50 testing zeek@ rhelzeek05:~/.zkg$ more config [sources] zeek = https://github.com/zeek/packages [paths] state_dir = /nsm/zeek/.zkg script_dir = /opt/zeek/share/zeek/site plugin_dir = /opt/zeek/lib/zeek/plugins zeek_dist = /usr/local/src/zeek-3.0.11 From: Vlad Grigorescu &lt;vlad(a)es.net&gt; Date: Monday, 9 November 2020 at 16:55 To: Carlos Lopez &lt;clopmz(a)outlook.com&gt; Cc: &quot;zeek(a)lists.zeek.org&quot; &lt;zeek(a)lists.zeek.org&gt; Subject: Re: [Zeek] Error installing af_packet plugin for Zeek 3.0.11 The diff in the test failure is because Zeek failed to load the plugin. I'm guessing this is due to the non-standard install location. Did you run "zkg autoconfig?" Can you provide your zkg configuration file, ~/.zkg/zkg.conf as whatever user you tried running zkg? --Vlad On Mon, Nov 9, 2020 at 3:04 AM Carlos Lopez <clopmz@outlook.com<mailto:clopmz@outlook.com>> wrote: Hi all, I'm trying to install a new server with Zeek 3.0.11 under RHEL8 and when I try to install the af_packet plugin I get the following error: scripts.show-plugin ... failed % 'btest-diff output' failed unexpectedly (exit code 1) % cat .diag == File =============================== == Diff =============================== --- /tmp/test-diff.37542.output.baseline.tmp 2020-11-09 08:58:38.353727203 +0000 +++ /tmp/test-diff.37542.output.tmp 2020-11-09 08:58:38.347727173 +0000 @@ -1,10 +0,0 @@ -Zeek::AF_Packet - Packet acquisition via AF_Packet (dynamic, version) - [Packet Source] AF_PacketReader (interface prefix "af_packet"; supports live input) - [Type] AF_Packet::FanoutMode - [Constant] AF_Packet::buffer_size - [Constant] AF_Packet::enable_hw_timestamping - [Constant] AF_Packet::enable_fanout - [Constant] AF_Packet::enable_defrag - [Constant] AF_Packet::fanout_mode - [Constant] AF_Packet::fanout_id - ======================================= % cat .stderr Traceback (most recent call last): File "/nsm/zeek/.local/bin/zeek", line 11, in <module> sys.exit(main()) File "/nsm/zeek/.local/lib/python3.6/site-packages/zeek.py", line 18, in main cli(auto_envvar_prefix='ZEEK') File "/nsm/zeek/.local/lib/python3.6/site-packages/click/core.py", line 829, in __call__ return self.main(*args, **kwargs) File "/nsm/zeek/.local/lib/python3.6/site-packages/click/core.py", line 760, in main _verify_python3_env() File "/nsm/zeek/.local/lib/python3.6/site-packages/click/_unicodefun.py", line 130, in _verify_python3_env " mitigation steps.{}".format(extra) RuntimeError: Click will abort further execution because Python 3 was configured to use ASCII as encoding for the environment. Consult https://click.palletsprojects.com/python3/ for mitigation steps. This system supports the C.UTF-8 locale which is recommended. You might be able to resolve your issue by exporting the following environment variables: export LC_ALL=C.UTF-8 export LANG=C.UTF-8 1 of 1 test failed ¿¿??? I've never seen a this error installing af_packet plugin ... What does it mean? Regards, C. L. Martinez -- zeek mailing list -- zeek@lists.zeek.org<mailto:zeek@lists.zeek.org> To unsubscribe send an email to zeek-leave@lists.zeek.org<mailto:zeek-leave@lists.zeek.org>