zeek
Passive network traffic analyzer. tldr-pages
On several platforms
Several platforms
Passive network traffic analyzer. Any output and log files will be saved to the current working directory.
Analyze live traffic from a network interface
sudo zeek --iface interfaceIdentifyAnalyze live traffic from a network interface and load custom scripts
sudo zeek --iface interface script1 script2 ...IdentifyAnalyze live traffic from a network interface, without loading any scripts
sudo zeek --bare-mode --iface interfaceIdentifyAnalyze live traffic from a network interface, applying a tcpdump filter
sudo zeek --filter path/to/filter --iface interfaceIdentifyAnalyze live traffic from a network interface using a watchdog timer
sudo zeek --watchdog --iface interfaceIdentifyAnalyze traffic from a PCAP file
zeek --readfile path/to/file.traceIdentify