Zeek Network Monitoring Project

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Documentation for Zeek

High level language for describing protocol parsers.

Zeek's Messaging Library

A package manager for Zeek

Test baselines for Zeek.

The default package source of the Zeek Package Manager

Third-party code used in Zeek.

Built-In-Function (BIF) Compiler/Generator for Zeek

Tool for managing Zeek deployments.

Generates network traffic summaries.

A Python Module for CIDR Lookups

A tool to get some NIC statistics.

Zeek Auxiliary Programs

(DEPRECATED) Bro Client Communications Library

(DEPRECATED) Ruby bindings for Broccoli

(DEPRECATED) Python bindings for Broccoli

CMake scripts used in Zeek

A Simple Driver for Basic Unit Tests

Code for try.zeek.org.

Connectors for the Zeek NetControl framework

This code is old & stale, but may provide inspiration for a future version.

Docker files for building Zeek.

Native Netmap Packet IOSource for Bro/Zeek

Bro/Zeek integration with osquery

Time-Machine Dynamic Bulk Packet Recorder

Web viewer for packages maintained by the Zeek Package Manager, e.g. https://packages.zeek.org

(OBSOLETE) Plugins for Bro