Skip to content

Commit 8f3d581

Browse files
committed
Polish README more
1 parent f48dd7a commit 8f3d581

File tree

1 file changed

+3
-5
lines changed

1 file changed

+3
-5
lines changed

README.md

Lines changed: 3 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,8 @@
22

33
## About
44

5-
A proof-of-concept JavaScript based UDP logger to integrate
6-
Zeek with Cisco's Secure Network Analytics platform.
7-
8-
See: https://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch/zeek/7_5_2_Zeek_Configuration_Guide_DV_1_0.pdf
5+
A proof-of-concept JavaScript based UDP logger to integrate Syslog or
6+
other UDP-based log receiver systems with Zeek.
97

108
If this doesn't fulfill your performance or reliability requirements, you
119
can always implement a C++ Zeek plugin adding a UDP log writer component.
@@ -22,7 +20,7 @@ msg being the JSON encoded payload of the log record.
2220
<85> 1 2025-11-18T09:28:46.710Z zeek zeekjs-udp-logging 1372605 - [zeek_filename="conn.log"] {"ts":1763458065.435613,"uid":"CEvhV93jXZEA5UPcKh","id.orig_h":"192.168.0.109","id.orig_p":49549,"id.resp_h":"192.168.0.1","id.resp_p":1900,"proto":"udp","duration":1.2656450271606445,"orig_bytes":94,"resp_bytes":7278,"conn_state":"SF","local_orig":true,"local_resp":true,"missed_bytes":0,"history":"Dd","orig_pkts":1,"orig_ip_bytes":122,"resp_pkts":17,"resp_ip_bytes":7754,"ip_proto":17}
2321
<85> 1 2025-11-18T09:28:46.711Z zeek zeekjs-udp-logging 1372605 - [zeek_filename="ssl.log"] {"ts":1763458126.681856,"uid":"Cy4rVk3lxsm8DQh7R1","id.orig_h":"192.168.0.109","id.orig_p":34284,"id.resp_h":"192.0.78.212","id.resp_p":443,"version":"TLSv13","cipher":"TLS_AES_256_GCM_SHA384","curve":"x25519","server_name":"zeek.org","resumed":false,"established":true,"ssl_history":"CsiI"}
2422

25-
This may be compatible with Cisco's SNA system, but hasn't been integration tested yet.
23+
This may be compatible with [Cisco's SNA](https://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch/zeek/7_5_2_Zeek_Configuration_Guide_DV_1_0.pdf) system, but hasn't been integration tested yet.
2624

2725
### Raw JSON
2826

0 commit comments

Comments
 (0)