Zeek 3.0.0 onye nyocha okporo ụzọ tọhapụrụ

Afọ asaa mgbe e guzobere ikpeazụ ịrịba alaka alaka ọkọnọ ntọhapụ nke nyocha okporo ụzọ na usoro nchọpụta ntinye netwọkụ Nkeji 3.0.0 , ekesabu n'okpuru aha Bro. Nke a bụ ntọhapụ mbụ dị ịrịba ama kemgbe renaming oru ngo, mere n'ihi na aha Bro e jikọtara ya na oke subculture nke otu aha, na ọ bụghị dị ka a na-ezube ntulu na "Big Nwanna" si George Orwell si akwụkwọ akụkọ "1984" bu n'obi nke ndị dere. Edere koodu sistemụ na C++ na kesara site n'okpuru ikikere BSD.

Zeek bụ ikpo okwu nyocha okporo ụzọ lekwasịrị anya na, mana ọnweghị oke na, nlekota mmemme nchekwa. A na-enye modul maka nyocha na nyocha usoro netwọkụ ọkwa dị iche iche nke ngwa, na-eburu n'uche ọnọdụ njikọ yana ikwe ka ịmepụta ndekọ ndekọ zuru ezu (ihe ndekọ) nke ọrụ netwọk. A na-atụpụta asụsụ mpaghara akọwapụtara maka ide edemede nleba anya yana ịchọpụta ihe adịghị mma, na-eburu n'uche nkọwapụta nke akụrụngwa. A na-ahazi usoro a maka iji na netwọk bandwit dị elu. Enyere API maka njikọta na sistemụ ozi ndị ọzọ yana mgbanwe data ozugbo.

В ọhụrụ ntọhapụ:

• Edegharịrị onye nyocha maka protocol NTP kpamkpam yana agbakwunyere onye nyocha ọhụrụ maka MQTT. A gbasaala ikike nke ndị nyocha maka DNS, RDP, SMB na TLS. Maka DNS, a na-enye nyocha nke ndekọ SPF, yana maka DNSSEC - RRSIG, DNSKEY, DS, NSEC na NSEC3 na nhọrọ nke mmemme metụtara ha. Nkwado agbakwunyere maka protocol SMB 3.x na onye nyocha SMB, yana nkwado maka TLS 1.3 maka TLS;
• E mejuputala nkwado maka deencapsulation nke iyi ndị a na-ebufe n'ime ọwara VXLAN;
• Nkwado agbakwunyere maka njikọ nwere ụdị NFLOG;
• agbakwunyere ike ịchekwa data ewepụtara na ndekọ dị na ntinye UTF8;
• agbakwunyere nkwado maka mmechi maka ọrụ amaghị aha na asụsụ scripting, onye na-arụ ọrụ maka ịgụta tebụl n'ụdị isi-uru (“maka ( igodo, uru na t)”) agbakwunyere, arụ ọrụ nkewa nke ụdị Python-ụdị arụ ọrụ. ("v[2:4]"), ihe owuwu ọhụrụ, paraglob, ka akwadoro maka ijikọ ngwa ngwa nke ihe mkpuchi eriri na nnukwu ọnụọgụ ọnụọgụ abụọ;
• Ntụruaka niile n'aha "bro" nọ n'ụzọ faịlụ, ntọala, ngwugwu, scripts, oghere aha na ọrụ ejirila "zeek" dochie anya (nkwado maka aha ochie echekwabara maka ndakọrịta azụ). Onye njikwa ngwugwu bro-pkg ka ahagharịrị aha zkg.

isi: opennet.ru