Zeek Network Monitoring Project

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Zeek Auxiliary Programs

Documentation for Zeek

Code for try.zeek.org.

Test baselines for Zeek.

This code is old & stale, but may provide inspiration for a future version.

Tool for managing Zeek deployments.

Zeek's Messaging Library

The default package source of the Zeek Package Manager

Built-In-Function (BIF) Compiler/Generator for Zeek

High level language for describing protocol parsers.

(DEPRECATED) Bro Client Communications Library

(DEPRECATED) Python bindings for Broccoli

(DEPRECATED) Ruby bindings for Broccoli

A tool to get some NIC statistics.

A Python Module for CIDR Lookups

Generates network traffic summaries.

CMake scripts used in Zeek

A package manager for Zeek

Bro/Zeek integration with osquery

Third-party code used in Zeek.

A Simple Driver for Basic Unit Tests

Connectors for the Zeek NetControl framework

Docker files for building Zeek.

Native Netmap Packet IOSource for Bro/Zeek

Time-Machine Dynamic Bulk Packet Recorder

Web viewer for packages maintained by the Zeek Package Manager, e.g. https://packages.zeek.org

(OBSOLETE) Plugins for Bro