zeek update fails when updating from a v4 docker-zeek container to v6/latest due to incompatibility code logic in the ja3.zeek script here: /var/lib/docker/volumes/zeek-zkg-script/_data/ja3. The docker container uses to the volume zeek-zkg-script to mount the location of added scripts, to include ja3.zeek. PR was submitted which includes a command in the zeek script to remove the volume prior to starting an updated container. This ensures that the updated container gets the fixed ja3.zeek script which is compatible with Zeek v5.2 and above.
ja3.zeek issue: salesforce/ja3#87
PR: #44
zeek updatefails when updating from a v4 docker-zeek container to v6/latest due to incompatibility code logic in theja3.zeekscript here:/var/lib/docker/volumes/zeek-zkg-script/_data/ja3. The docker container uses to the volumezeek-zkg-scriptto mount the location of added scripts, to includeja3.zeek. PR was submitted which includes a command in thezeekscript to remove the volume prior to starting an updated container. This ensures that the updated container gets the fixedja3.zeekscript which is compatible with Zeek v5.2 and above.ja3.zeek issue: salesforce/ja3#87
PR: #44