Zeek
current (v5.2.2)
Table of Contents
About Zeek
Monitoring With Zeek
Get Started
Zeek Log Formats and Inspection
Zeek Logs
conn.log
dns.log
http.log
files.log
ftp.log
ssl.log
x509.log
smtp.log
ssh.log
pe.log
dhcp.log
ntp.log
SMB Logs (plus DCE-RPC, Kerberos, NTLM)
irc.log
rdp.log
traceroute.log
tunnel.log
dpd.log
known_*.log and software.log
weird.log and notice.log
capture_loss.log and reporter.log
Introduction to Scripting
Frameworks
Script Reference
Developer Guides
Subcomponents
Acknowledgements
Index
Zeek
Zeek Logs
Zeek Logs
ΒΆ
conn.log
dns.log
http.log
files.log
ftp.log
ssl.log
x509.log
smtp.log
ssh.log
pe.log
dhcp.log
ntp.log
SMB Logs (plus DCE-RPC, Kerberos, NTLM)
irc.log
rdp.log
traceroute.log
tunnel.log
dpd.log
known_*.log and software.log
weird.log and notice.log
capture_loss.log and reporter.log
Read the Docs
v: current (v5.2.2)
Versions
master
v5.2.2
v5.2.1
v5.2.0
v5.1.3
v5.1.2
v5.1.1
v5.1.0
v5.0.9
v5.0.8
v5.0.7
v5.0.6
v5.0.5
v5.0.4
v5.0.3
v5.0.2
v5.0.1
v5.0.0
v4.2.2
v4.1.1
v4.0.9
v3.2.3
v3.1.4
v3.0.14
lts
devel
current
Downloads
html
On Read the Docs
Project Home
Builds