GitPlanet

Cheap and reliable Node.js hosting starts at $3/month, and $1/month static HTML hosting

Created with love in Canada, visit hostnodejs.com today

Feel like to post an Ad? Learn Details
All Projects → blacktop → docker-zeek

blacktop / docker-zeek

Licence: MIT License
Zeek IDS Dockerfile

Programming Languages

Zeek
47 projects
Dockerfile
14818 projects
Makefile
30231 projects
shell
77523 projects

Labels

dockerelasticsearchkafkaidsnetwork-monitoringzeekzeek-ids

Projects that are alternatives of or similar to docker-zeek

Docker Bro
Bro IDS Dockerfile
Stars: ✭ 126 (+53.66%)
Mutual labels:  ids, network-monitoring
Ivre
Network recon framework, published by @cea-sec & @ANSSI-FR. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, collect and analyse network intelligence from your sensors, and much more!
Stars: ✭ 2,331 (+2742.68%)
Mutual labels:  network-monitoring, zeek
Zeek-Network-Security-Monitor
A Zeek Network Security Monitor tutorial that will cover the basics of creating a Zeek instance on your network in addition to all of the necessary hardware and setup and finally provide some examples of how you can use the power of Zeek to have absolute control over your network.
Stars: ✭ 38 (-53.66%)
Mutual labels:  network-monitoring, zeek
hardenedlinux-zeek-scripts
github.com/hardenedlinux/zeek-nix
Stars: ✭ 35 (-57.32%)
Mutual labels:  network-monitoring, zeek-ids
graylog-zeek-content-pack
BRO/Zeek IDS content pack contains pipeline rules, a stream, a dashboard displaying interesting activity, and a syslog tcp input to capture and index BRO/Zeek logs coming from a remote sensor.
Stars: ✭ 18 (-78.05%)
Mutual labels:  ids, zeek
Suricata Update
The tool for updating your Suricata rules.
Stars: ✭ 143 (+74.39%)
Mutual labels:  ids, network-monitoring
Zeek
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
Stars: ✭ 4,180 (+4997.56%)
Mutual labels:  network-monitoring, zeek
Suricata
Suricata git repository maintained by the OISF
Stars: ✭ 2,274 (+2673.17%)
Mutual labels:  ids, network-monitoring
zeek-docs
Documentation for Zeek
Stars: ✭ 41 (-50%)
Mutual labels:  network-monitoring, zeek
ivre
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, collect and analyse network intelligence from your sensors, and much more!
Stars: ✭ 2,712 (+3207.32%)
Mutual labels:  network-monitoring, zeek
harsh
Hashids implementation in Rust
Stars: ✭ 48 (-41.46%)
Mutual labels:  ids
sacnview
sACNView provides a tool for monitoring and sending the Streaming ACN lighting control protocol used for lighting control in theatres, TV studios and architectural systems
Stars: ✭ 75 (-8.54%)
Mutual labels:  network-monitoring
noc
Official read only mirror for
Stars: ✭ 84 (+2.44%)
Mutual labels:  network-monitoring
k3pler
Android network connection blocker and packet analyzer built on top of local HTTP proxy.
Stars: ✭ 38 (-53.66%)
Mutual labels:  network-monitoring
Fragscapy
Fragscapy is a command-line tool to fuzz network protocols by automating the modification of outgoing network packets. It can run multiple successive tests to determine which options can be used to evade firewalls and IDS.
Stars: ✭ 52 (-36.59%)
Mutual labels:  ids
CSArp-Netcut
An arpspoof program using Sharppcap
Stars: ✭ 93 (+13.41%)
Mutual labels:  network-monitoring
plasma-applet-netspeed-widget
Plasma 5 widget that displays the currently used network bandwidth
Stars: ✭ 76 (-7.32%)
Mutual labels:  network-monitoring
IPRadar2
Real-time detection and defense against malicious network activity and policy violations (exploits, port-scanners, advertising, telemetry, state surveillance, etc.)
Stars: ✭ 20 (-75.61%)
Mutual labels:  ids
wazuh-cloudformation
Wazuh - Amazon AWS Cloudformation
Stars: ✭ 32 (-60.98%)
Mutual labels:  ids
unifiZabbix
Zabbix templates to monitor pretty much all Unifi devices
Stars: ✭ 66 (-19.51%)
Mutual labels:  network-monitoring
View All Similar Projects ➔

Zeek Logo

docker-zeek

Zeek Network Security Monitor Dockerfile

Table of Contents

Dependencies

Image Tags

$ docker images

REPOSITORY           TAG          SIZE
blacktop/zeek        latest       65.6MB
blacktop/zeek        4.1          65.6MB
blacktop/zeek        4.0          41.6MB
blacktop/zeek        3.2          41.6MB
blacktop/zeek        3.1          39MB
blacktop/zeek        3.0          39MB
blacktop/zeek        elastic      129MB
blacktop/zeek        kafka        70.7MB
blacktop/zeek        zeekctl      84MB

Installation

  1. Install Docker.
  2. Download trusted build from public Docker Registry: docker pull blacktop/zeek

Getting Started

$ wget https://github.com/blacktop/docker-zeek/raw/master/pcap/heartbleed.pcap
$ wget https://github.com/blacktop/docker-zeek/raw/master/3.0/local.zeek
$ docker run --rm \
         -v `pwd`:/pcap \
         -v `pwd`/local.zeek:/usr/local/zeek/share/zeek/site/local.zeek \
         blacktop/zeek -r heartbleed.pcap local "Site::local_nets += { 192.168.11.0/24 }"
$ ls -l

-rw-r--r--  1 blacktop  staff   635B Jul 30 12:11 conn.log
-rw-r--r--  1 blacktop  staff   754B Jul 30 12:11 files.log
-rw-r--r--  1 blacktop  staff   384B Jul 30 12:11 known_certs.log
-rw-r--r--  1 blacktop  staff   239B Jul 30 12:11 known_hosts.log
-rw-r--r--  1 blacktop  staff   271B Jul 30 12:11 known_services.log
-rw-r--r--  1 blacktop  staff    17K Jul 30 12:11 loaded_scripts.log
-rw-r--r--  1 blacktop  staff   1.9K Jul 30 12:11 notice.log <====== NOTICE
-rw-r--r--  1 blacktop  staff   253B Jul 30 12:11 packet_filter.log
-rw-r--r--  1 blacktop  staff   1.2K Jul 30 12:11 ssl.log
-rw-r--r--  1 blacktop  staff   901B Jul 30 12:11 x509.log
$ cat notice.log | awk '{ print $11 }' | tail -n4

Heartbleed::SSL_Heartbeat_Attack
Heartbleed::SSL_Heartbeat_Odd_Length
Heartbleed::SSL_Heartbeat_Attack_Success

Documentation

Issues

Find a bug? Want more features? Find something missing in the documentation? Let me know! Please don't hesitate to file an issue and I'll get right on it.

License

MIT Copyright (c) 2018-2020 blacktop

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].