Forrest logo
back to context overview

zeek

List of commands for zeek:

  • zeek:tldr:4fd80 zeek: Analyze traffic from a `pcap` file.
    $ zeek --readfile ${filename-trace}
    try on your machine
    explain this command
  • zeek:tldr:9a063 zeek: Analyze live traffic from a network interface, without loading any scripts.
    $ sudo zeek --bare-mode --iface ${interface}
    try on your machine
    explain this command
  • zeek:tldr:ac434 zeek: Analyze live traffic from a network interface.
    $ sudo zeek --iface ${interface}
    try on your machine
    explain this command
  • zeek:tldr:cde55 zeek: Analyze live traffic from a network interface and load custom scripts.
    $ sudo zeek --iface ${interface} ${script1} ${script2}
    try on your machine
    explain this command
  • zeek:tldr:d69dd zeek: Analyze live traffic from a network interface, applying a `tcpdump` filter.
    $ sudo zeek --filter ${path-to-filter} --iface ${interface}
    try on your machine
    explain this command
  • zeek:tldr:f4264 zeek: Analyze live traffic from a network interface using a watchdog timer.
    $ sudo zeek --watchdog --iface ${interface}
    try on your machine
    explain this command
back to context overview