Shekaru bakwai bayan samuwar reshe mai mahimmanci na ƙarshe saki na nazarin zirga-zirga da tsarin gano kutse na hanyar sadarwa , wanda a da aka rarraba a ƙarƙashin sunan Bro. Wannan ita ce fitowar mahimmanci ta farko tun , aikata saboda sunan Bro da aka hade da gefe subculture na wannan sunan, kuma ba a matsayin ambato na "babban ɗan'uwa" daga George Orwell ta novel "1984" cikinsa da marubuta. An rubuta lambar tsarin a C++ da ƙarƙashin lasisin BSD.
Zeek dandamali ne na nazarin zirga-zirga da farko da aka mayar da hankali kan, amma ba'a iyakance shi ba, saka idanu abubuwan da suka shafi tsaro. Ana samar da moduloli don yin nazari da tantance ka'idojin cibiyar sadarwa daban-daban na matakin aikace-aikacen, la'akari da yanayin haɗin gwiwa da ba da damar ƙirƙirar cikakken log (takardar bayanai) na ayyukan cibiyar sadarwa. An ƙaddamar da takamaiman harshe na yanki don rubuta rubutun don sa ido da gano abubuwan da ba su da kyau, la'akari da ƙayyadaddun ƙayyadaddun kayan more rayuwa. An inganta tsarin don amfani a manyan cibiyoyin sadarwa na bandwidth. Ana ba da API don haɗin kai tare da tsarin bayanan ɓangare na uku da musayar bayanai na ainihi.
В :
- An sake rubuta parser ɗin ka'idar NTP gaba ɗaya kuma an ƙara sabon parser na MQTT. Fadada damar masu nazari don DNS, RDP, SMB da TLS. Don DNS, ana yin nazarin bayanan SPF, kuma don DNSSEC, RRSIG, DNSKEY, DS, NSEC, da bayanan NSEC3 ana tantance su kuma an haskaka abubuwan da suka shafi su. Ƙara goyon baya don ƙa'idar SMB 3.x zuwa ma'aunin SMB, kuma don TLS, goyan bayan TLS 1.3;
- Aiwatar da tallafi don deencapsulation na rafukan da ake watsawa a cikin ramukan VXLAN;
- Ƙara goyon baya don haɗin kai tare da nau'in NFLOG;
- Ƙara ikon adana bayanan da aka cire a cikin log in UTF8 encoding;
- Ƙara goyon baya don rufewa don ayyukan da ba a san su ba zuwa harshen rubutun, ƙara maɓalli-darajar tebur mai aiki ("don (maɓalli, ƙima a cikin t)"), aiwatar da ayyukan rarraba nau'ikan nau'ikan nau'ikan Python ("v[2:4]") , ya ba da shawarar sabon tsarin paraglob don saurin daidaita mashin kirtani a cikin manyan bayanan binary;
- Duk nassoshi na sunan "bro" a cikin hanyoyin fayil, saituna, fakiti, rubutun rubutu, wuraren suna, da ayyuka an canza su zuwa "zeek" (ana tallafawa tsoffin sunaye don dacewa da baya). An canza manajan fakitin bro-pkg zuwa zkg.
source: budenet.ru