Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
Alternatives To Zeek
Project NameStarsDownloadsRepos Using ThisPackages Using ThisMost Recent CommitTotal ReleasesLatest ReleaseOpen IssuesLicenseLanguage
Setup Ipsec Vpn22,057
2 days ago3otherShell
Scripts to build your own IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2
Cilium15,5661516 hours ago547September 14, 20221,162apache-2.0Go
eBPF-based Networking, Security, and Observability
2 days ago61April 21, 2021157otherGo
The Swiss Army knife for 802.11, BLE, IPv4 and IPv6 networks reconnaissance and MITM attacks.
Nebula11,865303 days ago45June 30, 2022135mitGo
A scalable overlay networking tool with a focus on performance, simplicity and security
Test Your Sysadmin Skills9,557
4 months ago13mit
A collection of Linux Sysadmin Test Questions and Answers. Test your knowledge and skills in different fields with these Q/A.
Scapy8,8468141503 days ago22April 19, 2021124gpl-2.0Python
Scapy: the Python-based interactive packet manipulation program & library. Supports Python 2 & Python 3.
17 hours ago64September 20, 2022144otherGo
Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.
a day ago1February 27, 2018170bsd-3-clauseC
The pattern matching swiss knife
Docker Ipsec Vpn Server5,532
17 days ago2otherShell
Docker image to run an IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2
a day ago103otherC++
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
Alternatives To Zeek
Select To Compare

Alternative Project Comparisons

Zeek Logo

The Zeek Network Security Monitor

A powerful framework for network traffic analysis and security monitoring.

Key FeaturesDocumentationGetting StartedDevelopmentLicense

Follow us on Twitter at @zeekurity.

Coverage Status Build Status

Slack Discourse

Key Features

  • In-depth Analysis Zeek ships with analyzers for many protocols, enabling high-level semantic analysis at the application layer.

  • Adaptable and Flexible Zeek's domain-specific scripting language enables site-specific monitoring policies and means that it is not restricted to any particular detection approach.

  • Efficient Zeek targets high-performance networks and is used operationally at a variety of large sites.

  • Highly Stateful Zeek keeps extensive application-layer state about the network it monitors and provides a high-level archive of a network's activity.

Getting Started

The best place to find information about getting started with Zeek is our web site www.zeek.org, specifically the documentation section there. On the web site you can also find downloads for stable releases, tutorials on getting Zeek set up, and many other useful resources.

You can find release notes in NEWS, and a complete record of all changes in CHANGES.

To work with the most recent code from the development branch of Zeek, clone the master git repository:

git clone --recursive https://github.com/zeek/zeek

With all dependencies in place, build and install:

./configure && make && sudo make install

Write your first Zeek script:

# File "hello.zeek"

event zeek_init()
    print "Hello World!";

And run it:

zeek hello.zeek

For learning more about the Zeek scripting language, try.zeek.org is a great resource.


Zeek is developed on GitHub by its community. We welcome contributions. Working on an open source project like Zeek can be an incredibly rewarding experience and, packet by packet, makes the Internet a little safer. Today, as a result of countless contributions, Zeek is used operationally around the world by major companies and educational and scientific institutions alike for securing their cyber infrastructure.

If you're interested in getting involved, we collect feature requests and issues on GitHub here and you might find these to be a good place to get started. More information on Zeek's development can be found here, and information about its community and mailing lists (which are fairly active) can be found here.


Zeek comes with a BSD license, allowing for free use with virtually no restrictions. You can find it here.


We use the following tooling to help discover issues to fix, amongst a number of others.

Popular Network Projects
Popular Security Projects
Popular Networking Categories
Related Searches

Get A Weekly Email With Trending Projects For These Categories
No Spam. Unsubscribe easily at any time.
C Plus Plus
Network Monitoring