Zeek LT meeting notes 2024-01-11

LT Meeting Notes
,
1

Date of Meeting: 2024/01/11

Zeek Leadership Team Members

(bold indicates attendance)

  • Aashish Sharma, Lawrence Berkeley Lab
  • Christian Kreibich, Corelight (Technical Lead Seat, Merge-master)
  • Fatema Bannat Wala, ESnet
  • Johanna Amann, Corelight (Chair, Merge-master)
  • Keith Lehigh, Indiana University
  • Kelley Misata, Corelight (Community Seat, non-voting)
  • Robin Sommer, Corelight (Merge-master)
  • Seth Grover, Idaho National Lab
  • Vern Paxson, Corelight & University of California at Berkeley (Founder Seat)

Merge-masters:

  • Arne Welzel (Corelight)
  • Benjamin Bannier (Corelight)
  • Seth Hall (Corelight)
  • Tim Wojtulewicz (Corelight)

Minutes

During the beginning of the meeting, the LT discussed the state of Zeek Week planning. While things are still not finalized, it is getting more likely that we will have a Zeek Week event this year. Preliminary timing is sometime in August, on the west-coast of the USA.

However, we still do not have confirmation on room availability and pricing. As soon as we are sure that the event will take place, we will let the community know.

The second part of the LT meeting consisted of a discussion between the Merge-masters and the LT. A wide variety of topics were covered; these included:

  • Performance improvements of Zeek. There are indications that show that Zeek 6 can yield significantly better performance in some settings. Furthermore, there have been more performance improvements after it; see the last community call for more details.
  • There has been some discussion about the windows builds of Zeek. There recently has been more activity around this. If you are interested in this topic, join the #windows channel on Slack. We are also very happy for any help that we can get here – most of the Zeek development team does not have experience with windows development.
  • Part of the discussion revolved around how the merge-masters operate internally. Christian gave a short explanation; there is not much structure to it – most of what the merge masters do (and most of our communication) is publicly visible on Github.
  • The question of how to get more people involved in the project was discussed a bit. The LT hopes that more in-person events might help encourage this. If you are interested in getting involved with the project, but you don’t know where to start – have held off for any reason – please let us know.
  • After that, the question if there is anything that the LT can do to help the Merge Masters was discussed. There is a possibility that one of the LT members might be able to set up a machine for the Merge Masters to be able to test Zeek on real traffic.