base/init-default.zeek

This script loads everything in the base/ script directory. If you want to run Zeek without all of these scripts loaded by default, you can use the -b (--bare-mode) command line argument. You can also copy the “@load” lines from this script to your own script to load only the scripts that you actually want.

Imports:base/files/extract, base/files/hash, base/files/pe, base/files/x509, base/frameworks/analyzer, base/frameworks/cluster, base/frameworks/config, base/frameworks/control, base/frameworks/dpd, base/frameworks/intel, base/frameworks/netcontrol, base/frameworks/notice, base/frameworks/openflow, base/frameworks/packet-filter, base/frameworks/reporter, base/frameworks/signatures, base/frameworks/software, base/frameworks/sumstats, base/frameworks/tunnels, base/misc/find-checksum-offloading.zeek, base/misc/find-filtered-trace.zeek, base/misc/version.zeek, base/protocols/conn, base/protocols/dce-rpc, base/protocols/dhcp, base/protocols/dnp3, base/protocols/dns, base/protocols/ftp, base/protocols/http, base/protocols/imap, base/protocols/irc, base/protocols/krb, base/protocols/modbus, base/protocols/mqtt, base/protocols/mysql, base/protocols/ntlm, base/protocols/ntp, base/protocols/pop3, base/protocols/radius, base/protocols/rdp, base/protocols/rfb, base/protocols/sip, base/protocols/smb, base/protocols/smtp, base/protocols/snmp, base/protocols/socks, base/protocols/ssh, base/protocols/ssl, base/protocols/syslog, base/protocols/tunnels, base/protocols/xmpp, base/utils/active-http.zeek, base/utils/addrs.zeek, base/utils/backtrace.zeek, base/utils/conn-ids.zeek, base/utils/dir.zeek, base/utils/directions-and-hosts.zeek, base/utils/email.zeek, base/utils/exec.zeek, base/utils/files.zeek, base/utils/geoip-distance.zeek, base/utils/hash_hrw.zeek, base/utils/numbers.zeek, base/utils/paths.zeek, base/utils/patterns.zeek, base/utils/queue.zeek, base/utils/site.zeek, base/utils/strings.zeek, base/utils/thresholds.zeek, base/utils/time.zeek, base/utils/urls.zeek

Summary

Detailed Interface