Zeek Traffic Analyzer 3.0.0 Tso tawm

Xya xyoo tom qab tsim cov ceg tseem ceeb kawg hais tawm tso tawm ntawm kev tsom xam tsheb thiab kev nkag mus rau hauv lub network Zauv 3.0.0 , yav tas los faib nyob rau hauv lub npe Bro. Nov yog thawj qhov tseem ceeb tshaj tawm txij li thaum qhov project renaming, tau cog lus vim tias lub npe Bro tau cuam tshuam nrog cov kab lis kev cai ntawm tib lub npe, thiab tsis yog ib qho lus qhia ntawm "tus tij laug loj" los ntawm George Orwell tus tshiab "1984" xeeb los ntawm cov kws sau ntawv. Qhov system code sau hauv C ++ thiab faib los ntawm raws li BSD daim ntawv tso cai.

Zeek yog lub platform tsom xam cov tsheb thauj neeg feem ntau tsom rau, tab sis tsis txwv rau, saib xyuas cov xwm txheej ntsig txog kev nyab xeeb. Modules yog muab rau kev txheeb xyuas thiab txheeb xyuas ntau yam kev sib txuas hauv network ntawm qib kev thov, suav nrog lub xeev ntawm kev sib txuas thiab tso cai rau tsim cov ncauj lus kom ntxaws (archive) ntawm kev ua haujlwm hauv network. Ib hom lus tshwj xeeb tshwj xeeb yog npaj rau kev sau ntawv rau kev saib xyuas thiab txheeb xyuas qhov tsis txaus ntseeg, suav nrog qhov tshwj xeeb ntawm cov txheej txheem tshwj xeeb. Lub kaw lus yog optimized rau siv nyob rau hauv high bandwidth networks. API yog muab rau kev koom ua ke nrog cov ntaub ntawv thib peb thiab kev sib pauv cov ntaub ntawv ntawm lub sijhawm.

В tawm tshiab:

• Tus parser rau NTP raws tu qauv tau raug sau tag nrho thiab ib qho parser tshiab rau MQTT tau ntxiv. Kev nthuav dav cov peev txheej ntsuas rau DNS, RDP, SMB thiab TLS. Rau DNS, SPF cov ntaub ntawv raug txheeb xyuas, thiab rau DNSSEC, RRSIG, DNSKEY, DS, NSEC, thiab NSEC3 cov ntaub ntawv raug txheeb xyuas thiab lawv cov xwm txheej cuam tshuam tau hais txog. Ntxiv kev txhawb nqa rau SMB 3.x raws tu qauv rau SMB parser, thiab rau TLS, txhawb rau TLS 1.3;
• Siv kev txhawb nqa rau deencapsulation ntawm cov kwj kis hauv VXLAN tunnels;
• Ntxiv kev txhawb nqa rau kev txuas nrog NFLOG hom;
• Ntxiv lub peev xwm los khaws cov ntaub ntawv rho tawm hauv lub cav hauv UTF8 encoding;
• Ntxiv kev txhawb nqa rau kev kaw rau cov haujlwm tsis qhia npe rau cov lus sau, ntxiv cov lus tseem ceeb-tus nqi iteration tus neeg teb xov tooj ("rau (qhov tseem ceeb, tus nqi hauv t)"), siv Python-style vector splitting operations ("v[2: 4]") , tau npaj cov qauv paraglob tshiab rau kev sib tw nrawm ntawm cov hlua lub ntsej muag hauv cov ntaub ntawv loj binary;
• Txhua qhov kev xa mus rau lub npe "bro" hauv cov ntaub ntawv txoj hauv kev, teeb tsa, pob khoom, ntawv sau, lub npe, thiab cov haujlwm tau raug hloov mus rau "zeek" (cov npe qub tau txhawb nqa rov qab sib raug zoo). Tus thawj tswj pob bro-pkg tau hloov npe rau zkg.

Tau qhov twg los: opennet.ru