Zeek Network Monitoring Project

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Documentation for Zeek

Tool for managing Zeek deployments.

Generates network traffic summaries.

A Python Module for CIDR Lookups

A tool to get some NIC statistics.

Zeek Auxiliary Programs

Zeek's Messaging Library

(DEPRECATED) Bro Client Communications Library

(DEPRECATED) Ruby bindings for Broccoli

(DEPRECATED) Python bindings for Broccoli

High level language for describing protocol parsers.

Built-In-Function (BIF) Compiler/Generator for Zeek

CMake scripts used in Zeek

A package manager for Zeek

The default package source of the Zeek Package Manager

Test baselines for Zeek.

A Simple Driver for Basic Unit Tests

Code for try.zeek.org.

Third-party code used in Zeek.

Connectors for the Zeek NetControl framework

Docker files for building Zeek.

Native Netmap Packet IOSource for Bro/Zeek

Bro/Zeek integration with osquery

Time-Machine Dynamic Bulk Packet Recorder

Web viewer for packages maintained by the Zeek Package Manager, e.g. https://packages.zeek.org

(OBSOLETE) Plugins for Bro

Misc. Bro scripts