Zeek IDS with Always-on Packet Capture

Recall every network activity with perfect clarity. Always on packet capture means you always have the data you need.

Record weeks to months of traffic from across your distributed, on-premise, public and private cloud network.

Rapid, centralized search and data-mining puts conclusive forensic evidence at your fingertips in seconds not hours.

Quickly and accurately reconstruct events, analyze pcap data and reassemble files with InvestigationManager.

Your entire estate of EndaceProbes, physical and cloud, managed centrally, with network-wide investigations from a single pane-of-glass.

Zeek can be hosted in the EndaceProbe's Application Dock™ hosting environment. It is included in the DockOS virtual machine image that can be downloaded from the Endace Support Portal for fast, easy deployment on EndaceProbes.