Zeek Blog

Zeek 3.2 Released

(This is an updated version of the previous RC announcement.) We are very happy to make Zeek 3.2 available today. Some highlights of the new release include: Zeek now supports synchronizing tables/sets across clusters through a backing Broker data store. The same...

read more

Zeek Mailing List Migration

We recently migrated our mailing lists to a new mailing list host - and domain. All of our mailing lists are now hosted at lists.zeek.org; this includes the interface to join the list, as well as the list archives. This also means that all of our mailing lists now use...

read more

7 Dos And Don’ts For Zeek Scripting

This post serves as an introduction to some of the pitfalls I had to learn about whilst writing scripts. Hopefully, they help you avoid the same pitfalls. In some of the below example code snippets, bold font is used to emphasize a particular pitfall. If you’d like to...

read more

Got Zoom ?

I still find it amazing what you can find quite simply with Zeek.  Since Zoom seems to be on top of mind for many recently, as an example to show how easily you can highlight specific traffic with great accuracy and granularity, I wrote this simple PoC package...

read more

The New IO Loop in Zeek 3.1

Zeek has a long-standing issue with standby CPU usage on low-power systems and low-traffic networks where even if nothing is happening on the network, Zeek will continue to use 10-15% of the CPU doing nothing. This stems from the fact that the existing main loop of...

read more

Zeek From Home

Since we won’t be holding any in-person Zeek events for the foreseeable future, we’d like to invite you to be part of a new weekly ‘Zeek From Home’ webinar series to kick off in April. The schedule will be announced once we have a few submissions queued up.  These...

read more

Announcing the Zeek Agent

This posting is cross-posted between the Zeek blog and the Trail of Bits blog.  Announcing The Zeek Agent    The Zeek Network Security Monitor provides a powerful open-source platform for network traffic analysis. However, from its network vantage point, Zeek...

read more

Announcing the NEW Zeek Website!

In 2018, Vern Paxson, Zeek creator, announced that the Bro Project had officially changed its name from “Bro” to “Zeek”. With a new project name comes new branding, and in 2019 in the opening remarks for ZeekWeek the new Zeek Project logo was announced. And today we...

read more