Latest news, tutorials, and insights by Arne Welzel.
This post provides an overview of the direction the Zeek project is taking around ZeekControl and its intended successor, the Management Framework. The primary and suggested way to run a Zeek deployment for live traffic monitoring…
read more about Beyond ZeekControlAWS provides a feature that allows mirroring your infrastructure’s network traffic to a separate system for analysis purposes. This is called AWS Traffic Mirroring. If you’d like to use Zeek’s network traffic analysis capabilities in such…
read more about Using Zeek with AWS Traffic Mirroring and KafkaWith Zeek 8.0, we’re taking the first step toward a major shift in cluster communication. A new ZeroMQ backend is now available, making it simpler to run clusters and opening the door for more flexible backends…
read more about ZeroMQ Cluster Backend: Try It Out in Zeek 8Over the course of the past year we’ve made a number of changes to Zeek that have positively affected its performance, sometimes considerably. This blog post highlights a few places and changes that knowingly improved performance…
read more about Recent Zeek Performance Improvements