Package zeek-core

The core zeek installation without zeekctl

https://zeek.org

Zeek is a powerful network analysis framework that is much different from the
typical IDS you may know. While focusing on network security monitoring, Zeek
provides a comprehensive platform for more general network traffic analysis as
well. Well grounded in more than 15 years of research, Zeek has successfully
bridged the traditional gap between academia and operations since its
inception. Today, it is relied upon operationally in particular by many
scientific environments for securing their cyberinfrastructure. Zeek's user
community includes major universities, research labs, supercomputing centers,
and open-science communities.

Version: 6.0.4

General Commands

zeek-cut parse Zeek logs

System Administration

zeek passive network traffic analyzer