Hamstring - Zeek

Zeek based module to ingest data in the main Hamstring application based on Apache Kafka queues.

Report Bug · Request Feature

Continuous Integration

Getting Started

Run hamstring's Zeek module using Docker Compose:

docker compose up

Please note that in order for the module to work, you need to have an instance of Hamstring running. To do so, please refer to the official hamstring repository.

Building

Install vcpkg and required building tools:

sudo apt install cmake pkg-config curl zip unzip git openssl ninja-build
# Set up vcpkg
git clone https://github.com/microsoft/vcpkg.git
./vcpkg/bootstrap-vcpkg.sh
export VCPKG_ROOT=$(pwd)/vcpkg

# Build
make -S . -B build -G Ninja \
  -DCMAKE_BUILD_TYPE=Release \
  -DBUILD_TESTS=OFF \
  -DCMAKE_TOOLCHAIN_FILE=$VCPKG_ROOT/scripts/buildsystems/vcpkg.cmake
cmake --build build --parallel