Zeek Network Monitoring Project

zeek

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

zeek-docs

Documentation for Zeek

try-zeek

Code for try.zeek.org.

zeek-package-ci

package-manager

A package manager for Zeek

packages

The default package source of the Zeek Package Manager

zeek-3rdparty

Third-party code used in Zeek.

paraglob

A fairly quick data structure for matching a string against a large list of patterns.

binpac

High level language for describing protocol parsers.

zeek-testing

Test baselines for Zeek.

broker

Zeek's Messaging Library

btest

A Simple Driver for Basic Unit Tests

zeekctl

Tool for managing Zeek deployments.

pysubnettree

A Python Module for CIDR Lookups

trace-summary

Generates network traffic summaries.

zeek-pkg-web

Web viewer for packages maintained by the Zeek Package Manager, e.g. https://packages.zeek.org

capstats

A tool to get some NIC statistics.

zeek-aux

Zeek Auxiliary Programs

zeek-netcontrol

Connectors for the Zeek NetControl framework

bifcl

Built-In-Function (BIF) Compiler/Generator for Zeek

cmake

CMake scripts used in Zeek

vim-zeek

Vim syntax highlighting for the Zeek scripting language (.zeek and .bro files)

zeek-sublime

Zeek scripting language highlighting/support for Sublime Text

zeek-osquery

Bro/Zeek integration with osquery

zeek-docker

Docker files for building Zeek.

broccoli

(DEPRECATED) Bro Client Communications Library

broccoli-python

(DEPRECATED) Python bindings for Broccoli

broccoli-ruby

(DEPRECATED) Ruby bindings for Broccoli

bro-netmap

Native Netmap Packet IOSource for Bro/Zeek