Skip to content

zeekctl: Error: must run zeekctl on same machine as the manager node 127.0.0.1 vs 127.0.1.1 #44

@initconf

Description

@initconf

So, I saw this error when running zeekctl ( and zeekctl cron):

Error: must run zeekctl on same machine as the manager node. The manager node has IP address 
127.0.1.1 and this machine has IP addresses: 128.3.x.y, fe80::3eec:efff:fe28:8c5a, 
fe80::3eec:efff:fe28:8c5b, 127.0.0.1, ::1

Turns out this is some soft Linuxism where linux's netcfg creates this entry in /etc/hosts where

127.0.0.1 localhost
127.0.1.1 fqdn 

This seems to have surfaced quite suddently and automatically on me.

While I changed the node.cfg to explicity use IP address instead of hostname as a workaround, I do see that /usr/local/zeek/lib/broctl/ZeekControl/config.py has hardcoded 127.0.0.1, ::1

Would be useful if zeekctl (aka config.py) handles 127.0.0.0/8 instead

PS: https://serverfault.com/questions/363095/why-does-my-hostname-appear-with-the-address-127-0-1-1-rather-than-127-0-0-1-in

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions