Scan::Address_Scan & Scan::Port_Scan

Zeek
1

Since upgrading to Zeek version 6.2.1, I am no longer seeing address and port scan events in Zeek. I am able to see other ‘note’ but not these two. Do I have to manually import the scan.zeek file again?

2

Hey @simba , we do not maintain scan.zeek in-tree anymore. It was removed with Zeek 6.1:

Please switch to the suggested package.

Thanks,
Arne

1 Like