Zeek Network Monitoring Project

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Documentation for Zeek

High level language for describing protocol parsers.

A fairly quick data structure for matching a string against a large list of patterns.

Tool for managing Zeek deployments.

Generates network traffic summaries.

A Python Module for CIDR Lookups

Zeek Auxiliary Programs

CMake scripts used in Zeek

Connectors for the Zeek NetControl framework

Built-In-Function (BIF) Compiler/Generator for Zeek

Zeek's Messaging Library

Test baselines for Zeek.

Code for try.zeek.org.

Docker files for building Zeek.

A package manager for Zeek

The default package source of the Zeek Package Manager

Zeek scripting language highlighting/support for Sublime Text

Vim syntax highlighting for the Zeek scripting language (.zeek and .bro files)

A Simple Driver for Basic Unit Tests

(DEPRECATED) Bro Client Communications Library

(DEPRECATED) Python bindings for Broccoli

(DEPRECATED) Ruby bindings for Broccoli

A tool to get some NIC statistics.

Bro/Zeek integration with osquery

Third-party code used in Zeek.

Native Netmap Packet IOSource for Bro/Zeek

Time-Machine Dynamic Bulk Packet Recorder