Kwiminyaka esixhenxe emva kokusekwa kwesebe lokugqibela elibalulekileyo ukukhululwa kohlalutyo lwetrafikhi kunye nenkqubo yokukhangela ukungena kwinethiwekhi , ngaphambili isasazwe phantsi kwegama elithi Bro. Esi sisiqalo sokuqala esibalulekileyo ukusukela oko , uzibophelele ngenxa yokuba igama elithi Bro lidibene ne-marginal subculture yegama elifanayo, kwaye kungekhona njengento ejoliswe kuyo "UMzalwana Omkhulu" ukusuka kwinoveli kaGeorge Orwell "1984" ejoliswe ngababhali. Ikhowudi yenkqubo ibhaliwe kwiC ++ kunye phantsi kwelayisensi ye-BSD.
I-Zeek liqonga lokuhlalutya i-traffic eligxile ikakhulu, kodwa lingaphelelanga apho, esweni isiganeko sokhuseleko. Iimodyuli zinikezelwe ukuhlalutya kunye nokwahlulahlula iiprothokholi zenethiwekhi zenqanaba lesicelo, kuthathelwa ingqalelo imeko yoqhagamshelo kunye nokuvumela ukudalwa kwelog eneenkcukacha (i-archive) yomsebenzi womnatha. Kucetywa ulwimi oluthile lwesizinda sokubhala izikripthi zokubeka iliso nokuchonga izinto ezingaqhelekanga, kuthathelwa ingqalelo iinkcukacha zeziseko zophuhliso ezithile. Inkqubo ilungiselelwe ukusetyenziswa kuthungelwano lwe-bandwidth ephezulu. I-API inikezelwa ukudibanisa kunye neenkqubo zolwazi lomntu wesithathu kunye notshintshiselwano lwedatha ngexesha langempela.
В :
- I-analyzer ye-NTP protocol ibhalwe ngokutsha ngokupheleleyo kwaye i-analyzer entsha ye-MQTT yongezwe. Izakhono zabahlalutyi be-DNS, i-RDP, i-SMB kunye ne-TLS ziye zandiswa. Kwi-DNS, ukucazululwa kweerekhodi ze-SPF kunikezelwa, kunye ne-DNSSEC - i-RRSIG, i-DNSKEY, i-DS, i-NSEC kunye ne-NSEC3 kunye nokukhethwa kweziganeko ezinxulumene nazo. Inkxaso eyongeziweyo ye-SMB 3.x protocol kwi-analyzer ye-SMB, kunye nenkxaso ye-TLS 1.3 ye-TLS;
- Inkxaso yokunciphisa imijelo esasazwa ngaphakathi kweetonela zeVXLAN iphunyeziwe;
- Inkxaso eyongeziweyo yamakhonkco anodidi lweNFLOG;
- Ukongeza amandla okugcina idatha ekhutshiweyo kwilogi kwi-encoding ye-UTF8;
- Inkxaso yokuvalwa kwemisebenzi engaziwa yongezwa kulwimi lokubhala, umqhubi wokubhala iitheyibhile kwifomathi yexabiso elingundoqo ("for (isitshixo, ixabiso kwi-t)") yongezwe, imisebenzi yokwahlula i-Python-style ye-vector iye yaphunyezwa. (“v[2:4]”), isakhiwo esitsha, iparaglob, sicetywa ukudityaniswa ngokukhawuleza kweemaski zomtya kwiiseti ezinkulu zedatha yokubini;
- Zonke iireferensi zegama elithi "bro" kwiindlela zeefayili, kwiisetingi, kwiipakethe, kwiincwadi zeempendulo, kwizithuba zamagama nakwimisebenzi endaweni yazo kufakwe u-"zeek" (inkxaso yamagama amadala agcinwe ukwenzela ukuhambelana okubuyela umva). Umphathi wephakheji ye-bro-pkg unikwe elinye igama ku-zkg.
umthombo: opennet.ru