Add workaround for zeek/3534 on Windows (#7)

brimdata · Jan 16, 2024 · c75b920 · c75b920
1 parent c640478
commit c75b920
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 2 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -109,7 +109,7 @@ jobs:
 
     - name: Finish packaging artifact
       run: ./release.sh
-      shell: sh
+      shell: bash
 
     - name: Upload artifact
       uses: actions/upload-artifact@v4

diff --git a/release.sh b/release.sh
@@ -1,4 +1,4 @@
-#!/bin/sh -ex
+#!/bin/bash -ex
 
 case $(uname) in
     Darwin|Linux)
@@ -75,6 +75,13 @@ install_zeek_package salesforce/hassh 76a47abe9382109ce9ba530e7f1d7014a4a95209
 install_zeek_package salesforce/ja3 421dd4f3616b533e6971bb700289c6bb8355e707
 echo "@load policy/protocols/conn/community-id-logging" | $sudo tee -a /usr/local/zeek/share/zeek/site/local.zeek
 
+# Work around https://github.com/zeek/zeek/issues/3534 on Windows
+[[ $(uname) =~ "NT" ]] &&
+  sed -i \
+    -e 's|^@load protocols/ssh/interesting-hostnames|#\0 # https://github.com/zeek/zeek/issues/3534 workaround|' \
+    -e 's|^@load frameworks/files/detect-MHR|#\0 # https://github.com/zeek/zeek/issues/3534 workaround|' \
+    /usr/local/zeek/share/zeek/site/local.zeek
+
 #
 # Create zip file.
 #