All tools

Home Network & IoT

Zeek (Bro)

Network analysis framework producing rich connection/DNS/HTTP logs.

advanced
Linux
Defense
Forensics

Authorized testing only. Practice on systems you own, isolated labs, or targets with written permission. Unauthorized access is illegal.

When

Building a serious home SOC-lite on a span port or gateway tap.

How

Run zeek on interface; ship logs to Elastic/Wazuh; alert on odd DNS.

Why

Professional-grade visibility scaled down to home labs.

Commands & usage

sudo zeek -i eth0
zeek -r capture.pcap
head conn.log dns.log http.log

Commands are educational examples. Adapt hosts, paths, and rates to your authorized scope.

Tags

home-network
nsms
logs
defense

Related in Home Network & IoT