-
It looks like `input-framework` does not like when a value in a table is deleted twice, albeit accidentally.
```
Core was generated by `/usr/local/zeek-6.2.0/bin/zeek -i myri0 -U .status -p zee…
-
Hi. We have a lot of protobuf (GRPC) traffic that we want to monitor. Currently we're using Zeek 6.2 from here: https://hub.docker.com/layers/zeek/zeek/6.2/images/sha256-b4b9322d4028bb8256317d71081205…
-
In the logstash pipelines there are a lot of places where we make "copies" of fields to their [ECS counterparts](https://www.elastic.co/guide/en/ecs/current/ecs-field-reference.html).
I think that …
-
Zeek's current behavior of silently ignoring traffic for which there is no analyzer is quite unexpected to new users. The assumption is that the conn log should contain data similar netflow or firewal…
-
Hello, i`m testing Zeek-agent with Zeek v.4 and receiving errors in /var/log/zeek/ :
"Reconnecting has failed. Retrying again later."
Everything configured as in Configure example.
This is zeek…
-
Customer report in ticket 1625 where rita import complains about "value out of range" for the missed_bytes field in conn.log . Customer has provided "rita507.txt" as the output lines of the import an…
-
The default search for populating the widgets can cause a system overload if many heavy indexes are present.
```
[zeek_idx_sourcetype]
search = index=* sourcetype=bro*
```
The overload is so …
-
I installed zeek-kafka via Manual Installation and it successfully outputs as follows
[root@securitypublicservicestest-bj-1 172.16.252.5 bin]# . /zeek -N Seiso::Kafka
Seiso::Kafka - Writes logs to K…
-
In the Zeek community call October 4, 2023, Arne Welzel gave a demo of a new Zeek demo using javascript to interface with MISP.
Christian Kreibich says in the next few days there will be blog posts…
-
Each role needs to be checked and update any ansible modules or tasks that are deprecated, failing or giving warnings.