Zeek Network Monitoring Project

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Documentation for Zeek

Code for try.zeek.org.

A Simple Driver for Basic Unit Tests

A fairly quick data structure for matching a string against a large list of patterns.

Generates network traffic summaries.

A Python Module for CIDR Lookups

Tool for managing Zeek deployments.

CMake scripts used in Zeek

Zeek Auxiliary Programs

Connectors for the Zeek NetControl framework

Built-In-Function (BIF) Compiler/Generator for Zeek

Zeek's Messaging Library

Vim syntax highlighting for the Zeek scripting language (.zeek and .bro files)

A tool to get some NIC statistics.

High level language for describing protocol parsers.

Test baselines for Zeek.

Docker files for building Zeek.

A package manager for Zeek

The default package source of the Zeek Package Manager

Zeek scripting language highlighting/support for Sublime Text

(DEPRECATED) Bro Client Communications Library

(DEPRECATED) Python bindings for Broccoli

(DEPRECATED) Ruby bindings for Broccoli

Bro/Zeek integration with osquery

Third-party code used in Zeek.

Native Netmap Packet IOSource for Bro/Zeek

Time-Machine Dynamic Bulk Packet Recorder