| Port details on branch 2026Q3 |
- zeek System for detecting network intruders in real-time
- 8.0.10 security
 =0       8.0.10Version of this port present on the latest quarterly branch. - Maintainer: leres@FreeBSD.org
- Port Added: 2026-08-22 20:21:05
- Last Update: 2026-08-22 20:17:43
- Commit Hash: 5e9e571
- License: CC-BY-4.0
- WWW:
- https://www.zeek.org/
- Description:
- Zeek (formerly known as Bro) is an open-source, Unix-based Network
Intrusion Detection System (NIDS) that passively monitors network
traffic and looks for suspicious activity. Zeek detects intrusions
by first parsing network traffic to extract its application-level
semantics and then executing event-oriented analyzers that compare
the activity with patterns deemed troublesome. Its analysis includes
detection of specific attacks (including those defined by signatures,
but also those defined in terms of events) and unusual activities
(e.g., certain hosts connecting to certain services, or patterns
of failed connection attempts).
Zeek is documented in the USENIX 1998 Security Conference proceedings
(as Bro).
  ¦  ¦  ¦  ¦ 
- Manual pages:
-
- pkg-plist: as obtained via:
make generate-plist - USE_RC_SUBR (Service Scripts)
-
- Dependency lines:
-
- To install the port:
- cd /usr/ports/security/zeek/ && make install clean
- To add the package, run one of these commands:
- pkg install security/zeek
- pkg install zeek
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.- PKGNAME: zeek
- Flavors: there is no flavor information for this port.
- distinfo:
- TIMESTAMP = 1787168749
SHA256 (zeek-8.0.10.tar.gz) = dbb1cb6c1eac27a8883ee4bd229a378b2f1253fa18e16cdeaaef8a00f124ddf1
SIZE (zeek-8.0.10.tar.gz) = 101045450
Packages (timestamps in pop-ups are UTC):
- Dependencies
- NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
- Build dependencies:
-
- bison>=3.3 : devel/bison
- flex>=2.6 : textproc/flex
- swig>=4.0.2 : devel/swig
- ipsumdump : net/ipsumdump
- bash : shells/bash
- py312-sqlite3>0 : databases/py-sqlite3@py312
- bison : devel/bison
- cmake : devel/cmake-core
- ninja : devel/ninja
- gettext-runtime>=0.26 : devel/gettext-runtime
- python3.12 : lang/python312
- perl5>=5.42.r<5.43 : lang/perl5.42
- Test dependencies:
-
- python3.12 : lang/python312
- Runtime dependencies:
-
- c-ares>=1.25.0 : dns/c-ares
- ipsumdump : net/ipsumdump
- cf : sysutils/lbl-cf
- hf : sysutils/lbl-hf
- bash : shells/bash
- py312-sqlite3>0 : databases/py-sqlite3@py312
- py312-zkg>=2.7.1 : security/py-zkg@py312
- python3.12 : lang/python312
- perl5>=5.42.r<5.43 : lang/perl5.42
- Library dependencies:
-
- libcares.so : dns/c-ares
- libzmq.so : net/libzmq4
- libmaxminddb.so : net/libmaxminddb
- libintl.so : devel/gettext-runtime
- There are no ports dependent upon this port
Configuration Options:- ===> The following configuration options are available for zeek-8.0.10:
GEOIP2=on: Build with GeoIP2 (MaxMindDB) support
IPSUMDUMP=on: Enables traffic summaries
LBL_CF=on: Unix time to formated time/date filter support
LBL_HF=on: Address to hostname filter support
PERFTOOLS=off: Use Perftools to improve memory & CPU usage
SPICY=on: Enable the Spicy parser generator
ZEEKCTL=on: ZeekControl support (implies IPSUMDUMP)
ZKG=on: Zeek package manager support
====> Options available for the single BUILD_TYPE: you have to select exactly one of them
DEBUG=off: Optimizations off, debug symbols/flags on
MINSIZEREL=off: Optimizations on, debug symbols/flags off
RELEASE=on: Optimizations on, debug symbols/flags off
RELWITHDEBINFO=off: Optimizations/debug symbols on, debug flags off
===> Use 'make config' to modify these settings
- Options name:
- security_zeek
- USES:
- bison cmake compiler:c++20-lang cpe gettext-runtime perl5 python shebangfix ssl
- FreshPorts was unable to extract/find any pkg message
- Master Sites:
|
| Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
| Commit | Credits | Log message |
|---|
8.0.10
22 Aug 2026 20:17:43
 |
Craig Leres (leres) |
security/zeek: Update to 8.0.10
https://github.com/zeek/zeek/releases/tag/v8.0.10
This release fixes the following vulnerabilities:
- HIGH: SMB: Chains of AndX messages can crash Zeek
- HIGH: DNP3: Memory exhaustion via file control (g70v1) fields
- HIGH: SIP: Memory exhaustion from long request/response paths
- HIGH: DHCP: Memory exhaustion from retained options after analyzer
violation
(Only the first 15 lines of the commit message are shown above  ) |
8.0.9_2
22 Aug 2026 20:17:41
 |
Craig Leres (leres) |
security/zeek: Remove /var/spool/zeek/zeekctl-config.sh on uninstall
... and remove from pkg-plist as it is automatically generated.
(cherry picked from commit 6dda64c6b5761551bbd747426a5ae8c36996af83) |
8.0.9_1
22 Aug 2026 20:17:37
|
Craig Leres (leres) |
security/zeek: Address stage-qa issues
Add missing pkg-plist entries for things installed in /var.
Also clean up empty include directories in STAGEDIR.
Reported by: diizzy
(cherry picked from commit e05695c847b90e2d4373c7f533a5872d61a8794f) |
As an Amazon Associate I earn from qualifying purchases.