Zeek Network Monitoring Project

The default package source of the Zeek Package Manager

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Zeek's Messaging Library

A package manager for Zeek

Tool for managing Zeek deployments.

Zeek Auxiliary Programs

(DEPRECATED) Bro Client Communications Library

(DEPRECATED) Ruby bindings for Broccoli

(DEPRECATED) Python bindings for Broccoli

Built-In-Function (BIF) Compiler/Generator for Zeek

Generates network traffic summaries.

A Python Module for CIDR Lookups

A tool to get some NIC statistics.

High level language for describing protocol parsers.

CMake scripts used in Zeek

Connectors for the Zeek NetControl framework

A Simple Driver for Basic Unit Tests

Third-party code used in Zeek.

Test baselines for Zeek.

Docker files for building Zeek.

Code for try.zeek.org.

Native Netmap Packet IOSource for Bro/Zeek

Bro/Zeek integration with osquery

Time-Machine Dynamic Bulk Packet Recorder

Web viewer for packages maintained by the Zeek Package Manager, e.g. https://packages.zeek.org

(OBSOLETE) Plugins for Bro

Misc. Bro scripts

A netmap-based packet layer for distributing and filtering traffic.