network analysis and security monitoring framework
Project homepage: https://www.zeek.org/
Description
Zeek (formerly known as "Bro") is a powerful framework for network analysis and
security monitoring.
Package information
- Ports path
- net/bro
- Package architecture
- amd64
- Maintainer
- Klemens Nanni <kn@openbsd.org>
- Categories
- net, security, lang/python
- Available flavors
- None listed
- Only for architectures
- aarch64, amd64, arm, i386, mips64, mips64el, powerpc, powerpc64, riscv64, sparc64, alpha, hppa
Ports list build and test dependencies as well as runtime dependencies. pkg_add selects those needed for installation.
Direct dependencies
Library
- lang/python/3
- net/libcares
- net/libmaxminddb
- net/zeromq STEM->=4.3.0
Runtime
- devel/py-gitpython
- devel/py-semantic-version
- net/py-websockets
- net/dbip/asn
- net/dbip/city
- net/dbip/country
- misc/findutils
- shells/bash
- net/curl
- lang/python/3
Build
- databases/libhiredis
- devel/bison
- devel/swig
- net/cppzmq
- shells/bash
- devel/cmake/core STEM->=4
- devel/ninja
- lang/python/3
Test
OpenBSD README
This README contains unresolved ports variables; replace them before using its commands.
+-----------------------------------------------------------------------
| Running zeek on OpenBSD
+-----------------------------------------------------------------------
Note that most zeekctl(8) commands must be run as root.
Post-install steps
==================
Before starting zeek(8) for the first time, the "interface" must be properly
configured under:
${SYSCONFDIR}/zeek/node.cfg
And the configuration and policies must be installed and deployed by running:
zeekctl deploy
This command will run zeekctl(8) with the check, install, and restart
arguments.
It's also recommended to enable housekeeping tasks by adding the following
entry into root's crontab(5):
*/5 * * * * ${TRUEPREFIX}/bin/zeekctl cron
See https://docs.zeek.org/en/current/quickstart.html for details.