Is anyone aware of any efforts to bundle the Broker communication library/bindings up into something that can be distributed with pip?
One of the most powerful capabilities is that of being able to hook Zeek up to other things. For example, we’re using it for a whole bunch of ML/AI stuff via Broker. The trouble is that, unless you build Zeek locally on the system, there doesn’t seem to be any good way to carry the Python piece to another system, yet this would be invaluable.
Is anyone aware of any efforts to bundle the Broker communication library/bindings up into something that can be distributed with pip?
I don't know of active efforts to do that, but there's been
ideas/interest: Python User Experience (make a PyPI package for bindings) · Issue #24 · zeek/broker · GitHub
One of the most powerful capabilities is that of being able to hook Zeek up to other things. For example, we’re using it for a whole bunch of ML/AI stuff via Broker. The trouble is that, unless you build Zeek locally on the system, there doesn’t seem to be any good way to carry the Python piece to another system, yet this would be invaluable.
It's maybe not as convenient as a pip distribution method or other
binary packaging you imagine, but in case the main awkwardness you're
emphasizing is apparent monolithic bundling with Zeek, I'll mention
that Broker does have independent releases from Zeek that can be
built/installed on their own (just mind the release-notes regarding
Zeek version compatibility): Releases · zeek/broker · GitHub
- Jon
It's maybe not as convenient as a pip distribution method or other
binary packaging you imagine, but in case the main awkwardness you're
emphasizing is apparent monolithic bundling with Zeek, I'll mention
that Broker does have independent releases from Zeek that can be
built/installed on their own (just mind the release-notes regarding
Zeek version compatibility): Releases · zeek/broker · GitHub
Oh! That was precisely what I was driving at. I was totally unaware of the independent releases. Let me see how tough it is to get those cross compiled.
Thanks Jon.