minimal zeek

Hey all, I’m working on building a zeek box on a training VM. The host will have limited resources. What the lowest config people have gotten to run in such an environment?

Note, it does not have to be perfect, the main goal is to generate some data so a few dropped packets are OK as is disabling some streams.

I’m looking to have 4 CPU/6GB RAM max.