Package: zeek (3.2.3+ds2-2 and others) [debports]

[ Source:  ]

passive network traffic analyzer

Zeek is primarily a security monitor that inspects all traffic on a link in depth for signs of suspicious activity. More generally, however, Zeek supports a wide range of traffic analysis tasks even outside of the security domain, including performance measurements and helping with trouble-shooting.

Zeek comes with built-in functionality for a range of analysis and detection tasks, including detecting malware by interfacing to external registries, reporting vulnerable versions of software seen on the network, identifying popular web applications, detecting SSH brute-forcing, validating SSL certificate chains, among others.

Other Packages Related to zeek

• dep: libbroker2 (>= 1.4.0+ds1)

  Bro's messaging library

• dep: libc6 (<< 2.34)

  GNU C Library: Shared libraries
  also a virtual package provided by libc6-udeb

  dep: libc6 (>> 2.33)

• dep: libcaf-core0.17 (>= 0.17.6)

  Implementation of the Actor Model in C++, core library

• dep: libgcc-s1 (>= 4.3)

  GCC support library

• dep: libgoogle-perftools4 (>= 2.9.1)

  libraries for CPU and heap analysis, plus an efficient thread-caching malloc

• dep: libkrb5-3 (>= 1.13~alpha1+dfsg)

  MIT Kerberos runtime libraries

• dep: libmaxminddb0 (>= 1.0.2)

  IP geolocation database library

• dep: libpcap0.8 (>= 1.0.0)

  system interface for user-level packet capture

• dep: libsqlite3-0 (>= 3.7.15)

  SQLite 3 shared library

• dep: libssl1.1 (>= 1.1.0)

  Package not available

• dep: libstdc++6 (>= 11)

  GNU Standard C++ Library v3

• dep: zeek-common (>= 3.2.3+ds2-2)

  Package not available

• dep: zlib1g (>= 1:1.1.4)

  compression library - runtime

Download zeek

Download for all available architectures

Architecture	Version	Package Size	Installed Size	Files
riscv64 (unofficial port)	3.2.3+ds2-2+b2	2,627.0 kB	8,388.0 kB	[list of files]