Zaka zisanu ndi ziwiri pambuyo mapangidwe otsiriza ofunika nthambi kutulutsidwa kwa kusanthula kwa magalimoto ndi njira yowunikira intrusion network , yomwe kale idagawidwa pansi pa dzina lakuti Bro. Aka ndi koyamba kutulutsa kofunikira kuyambira pamenepo , adadzipereka chifukwa dzina lakuti Bro lidalumikizidwa ndi chikhalidwe cham'mphepete mwa dzina lomwelo, osati monga momwe amafunira "Big Brother" kuchokera mu buku la George Orwell "1984" lomwe olembawo adafuna. Khodi yamakina imalembedwa mu C ++ ndi pansi pa layisensi ya BSD.
Zeek ndi nsanja yowunikira anthu omwe amayang'ana kwambiri, koma osati, kuwunikira zochitika zachitetezo. Ma module amaperekedwa kuti asanthule ndikusintha ma protocol osiyanasiyana amtundu wogwiritsa ntchito, poganizira momwe ma network amalumikizirana ndikuloleza kuti pakhale chipika chatsatanetsatane (zosungidwa) zama network. Chilankhulo chodziwika ndi domain chimaperekedwa kuti chilembetse zowunikira ndikuzindikira zolakwika, poganizira zazinthu zinazake. Dongosololi limakonzedwa kuti ligwiritsidwe ntchito pamanetiweki apamwamba kwambiri. API imaperekedwa kuti iphatikizidwe ndi machitidwe azidziwitso a chipani chachitatu ndikusinthana kwa data munthawi yeniyeni.
В :
- Analyzer ya protocol ya NTP yalembedwanso kwathunthu ndipo chowunikira chatsopano cha MQTT chawonjezedwa. Kuthekera kwa osanthula a DNS, RDP, SMB ndi TLS awonjezedwa. Kwa DNS, kuwerengeka kwa ma SPF amaperekedwa, komanso kwa DNSSEC - RRSIG, DNSKEY, DS, NSEC ndi NSEC3 ndikusankha zochitika zomwe zikugwirizana nazo. Thandizo lowonjezera la protocol ya SMB 3.x ku SMB analyzer, ndi chithandizo cha TLS 1.3 cha TLS;
- Thandizo lochepetsera mitsinje yopatsirana mkati mwa ngalande za VXLAN yakhazikitsidwa;
- Zowonjezera zothandizira maulalo okhala ndi mtundu wa NFLOG;
- Anawonjezera kuthekera kosunga deta yochotsedwa mu chipika mu encoding ya UTF8;
- Kuthandizira kutsekedwa kwa ntchito zosadziwika kwawonjezedwa m'chinenero cholembera, wogwiritsa ntchito kuwerengera matebulo mumtundu wamtengo wapatali ("kwa ( key, value in t) ") wawonjezedwa, ntchito zolekanitsa vekitala za Python zakhazikitsidwa. (“v[2:4]”), kamangidwe katsopano, paraglob, akuganiziridwa kuti azifananitsa mwachangu zigoba za zingwe mu seti yayikulu ya data ya binary;
- Maumboni onse a dzina loti "bro" m'njira zamafayilo, zoikamo, phukusi, zolemba, malo a mayina ndi ntchito zasinthidwa ndi "zeek" (chithandizo cha mayina akale omwe amasungidwa kuti agwirizane kumbuyo). Woyang'anira phukusi la bro-pkg wasinthidwa kukhala zkg.
Source: opennet.ru