3 ms·
Hadn't heard of zeek before - actually find this submarine article useful - it hints better at where and how, than the official zeek documentation. I still don'
by e12e 7y ago
Hadn't heard of zeek before - actually find this submarine article useful - it hints better at where and how, than the official zeek documentation. I still don't know what storage space I should budget for a gbps-month of zeek monitoring logs, though (I understand they're typically filtered... But also text?).
https://www.csoonline.com/article/3313050/zeek-a-free-powerful-way-to-monitor-networks-detect-threats.html https://www.csoonline.com/article/3313050/zeek-a-free-powerf...
As to the where - I guess I need to find some port that can give me a mirror of traffic.... But not that easy with heterogeneous lan+cloud+SaaS setup to figure out where/how to source "all" network traffic :/