# Zeek Newsletter - Issue 55 - September 2025

**URL:** <https://community.zeek.org/t/zeek-newsletter-issue-55-september-2025/7874>\
**Category:** Announcements\
**Tags:** newsletter\
**Created:** [October 2, 2025, 7:02pm UTC](https://community.zeek.org/t/zeek-newsletter-issue-55-september-2025/7874 "2025-10-02T19:02:53Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![michelle](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/michelle/32/772_2.png) [@michelle](https://community.zeek.org/u/michelle)\
**Post date:** [October 2, 2025, 7:02pm UTC](https://community.zeek.org/t/zeek-newsletter-issue-55-september-2025/7874/1 "2025-10-02T19:02:53Z")

</div>

![image](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f9e955e422466940a25170fbb31bb02d04dc6da4.jpeg)

# Welcome to the Zeek Newsletter

In this Issue:

- [Reminders](https://community.zeek.org/t/zeek-newsletter-issue-55-september-2025/7874#p-29504-dont-miss-this-reminders-for-the-community-2)
- [Tip of the Month](https://community.zeek.org/t/zeek-newsletter-issue-55-september-2025/7874#p-29504-zeek-tip-of-the-month-6)
- [Community Call Recap](https://community.zeek.org/t/zeek-newsletter-issue-55-september-2025/7874#p-29504-community-call-recap-8)
- [Development Updates](https://community.zeek.org/t/zeek-newsletter-issue-55-september-2025/7874#p-29504-development-updates-9)
- [Ecosystem News](https://community.zeek.org/t/zeek-newsletter-issue-55-september-2025/7874#p-29504-ecosystem-news-11)
- [Packages](https://community.zeek.org/t/zeek-newsletter-issue-55-september-2025/7874#p-29504-zeek-packages-12)
- [Get Involved](https://community.zeek.org/t/zeek-newsletter-issue-55-september-2025/7874#p-29504-get-involved-14)

TL;DR: Voting is open for the Zeek LT election, the 8.1 development continues, and upcoming events include NSF Summit training, hack.lu, and Zeek Workshop Europe 2026.

* * *

## Don’t Miss This – Reminders for the Community

### Leadership Team Election

Voting begins today. We received three nominations, and two are confirmed. Next steps are coming soon.

### 5 Ways to Contribute to the Zeek Project for the First Time

A quick guide for anyone curious about getting involved in the project. [Read more](https://zeek.org/2025/10/5-ways-to-contribute-to-the-zeek-project-for-the-first-time/)

### Upcoming events

- NSF Cybersecurity Summit Training (Boulder, Oct. 20-23) [Register here](https://web.cvent.com/event/da5a20cb-ef9b-40dd-8103-13ef5c4d56d7/summary)
- hack.lu (Luxembourg, Oct. 21–24) [Learn more](https://2025.hack.lu/agenda/)
- Zeek Workshop Europe (Geneva, Mar. 25-26): [Hosted at CERN](https://home.cern/) – registration opens soon!

* * *

## 💡 Zeek Tip of the Month

You can ask Zeek to extract transport-layer connection payloads to disk by saying:

`zeek -C -r your.pcap Conn::default_extract=T`

Zeek will produce one file per direction per connection, with the raw payload.

### Have a tip of your own?

Share tricks, shortcuts, or techniques with us! [Submit yours here](https://forms.gle/1DR2ei98E1n54dg39).

* * *

## Community Call Recap

Highlights from this month’s call:

- Zeek 8.1 development cycle and cluster backend updates
- Upcoming patch release (8.0.2)
- NSF Cybersecurity Summit workshop reminder
- New blog: 5 Ways to Contribute + new community initiative coming soon!
- Lightning talk: Georges Nasr demonstrated building a Zeek parser for Oracle traffic

Missed it? Watch the recording on our [YouTube channel](https://www.youtube.com/watch?v=lp-ksGXIROQ).

📅 The next call is November 5 at 10am Pacific Time. [Use this Zoom link to join.](https://us06web.zoom.us/j/99882457331?pwd=WVZLRGtpbmx1V2FqSnlRT1FLRC9lQT09)

* * *

## Development Updates

### September Recap

The Zeek 8.1 development cycle is moving ahead, with work focused on finalizing the switch to ZeroMQ as the default cluster backend. This change is on track for the release, and the team is especially interested in hearing from community members who are building third-party integrations with Zeek. If you’re currently working with WebSockets, Python bindings for Broker, or other mechanisms, now is the perfect time to share your experiences. Going forward, WebSockets and Zeek.js will be the primary supported paths for integrations, and community feedback will help smooth the transition.

Looking ahead, a patch release (8.0.2) is expected in the next two weeks to address accumulated fixes.

The team has also started exploring how Zeek might use XDP for scenarios like traffic shunting. If you have a relevant use case, please share your thoughts on Slack or Discourse–we’d love to hear from you!

* * *

## Ecosystem News

- [That Network Traffic Looks Legit, But it Could be Hiding a Serious Threat](https://thehackernews.com/2025/07/that-network-traffic-looks-legit-but-it.html) via The Hacker News
- [Security Onion](https://blog.securityonion.net/2025/09/security-onion-24180-now-available.html) 2.4.180 now available
- [Malcolm](https://github.com/idaholab/Malcolm/releases/tag/v25.09.0) v25.09.0 is out

* * *

## Zeek Packages

Anyone in the community can write add-on functionality for Zeek via packages.

- Browse Zeek packages: [https://packages.zeek.org](https://packages.zeek.org)
- Head to our [zkg package manager documentation](https://docs.zeek.org/projects/package-manager/en/stable/index.html) to get started on your own
- Questions? Check out [#package-sharing](https://zeekorg.slack.com/archives/CTGDGK6EA) to get help

Recently added or updated packages are always visible on GitHub directly, via the following search of pull requests to our package repository:

[https://github.com/zeek/packages/pulls?q=is%3Apr+is%3Aclosed](https://github.com/zeek/packages/pulls?q=is%3Apr+is%3Aclosed)

### Latest updates:

> **[GitHub - awelzel/zeekctl-systemd: Zeekctl plugin to run a systemd-supervised Zeek...](https://github.com/awelzel/zeekctl-systemd?tab=readme-ov-file)**
>
> Zeekctl plugin to run a systemd-supervised Zeek cluster

* * *

## Get Involved

- Share ideas or content: [news@zeek.org](mailto:news@zeek.org) or [#security-news](https://zeekorg.slack.com/archives/CT0J1PSR2) on Slack.
- Stay connected: [Discourse](https://community.zeek.org) • [YouTube](https://youtube.com/c/Zeekurity) • [Mastodon](https://infosec.exchange/@zeek) • [Bluesky](https://bsky.app/profile/zeek.org) • [LinkedIn](https://www.linkedin.com/company/zeekurity)
- Check out [Leadership Team meeting notes](https://community.zeek.org/c/lt-meeting-notes/13) for insider updates.
- Looking for Zeek jobs? [See openings on LinkedIn](https://www.linkedin.com/jobs/search/?keywords=zeek).

Thanks for being part of the community. We’ll see you next time!

---

<div class="post-metadata">

**Author:** ![michelle](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/michelle/32/772_2.png) [@michelle](https://community.zeek.org/u/michelle)\
**Post date:** [October 2, 2025, 7:18pm UTC](https://community.zeek.org/t/zeek-newsletter-issue-55-september-2025/7874/2 "2025-10-02T19:18:32Z")

</div>


