Package Details: zeek 3.1.3-1

Git Clone URL: (read-only, click to copy)
Package Base: zeek
Description: A network analysis framework
Upstream URL:
Licenses: BSD
Submitter: synnick
Maintainer: synnick
Last Packager: synnick
Votes: 4
Popularity: 0.002912
First Submitted: 2019-06-04 11:57
Last Updated: 2020-05-25 08:00

Latest Comments

1 2 Next › Last »

boogy commented on 2020-09-17 11:11

You need to change the path to the patch file as it's not installing due to a wrong path.

Replace ../../ with ../patchfile.diff

Best, Boogy

synnick commented on 2020-05-14 12:46

I've rolled the version back to 3.0.6 due to compilation errors encountered on an up to date arch system and gcc 10.1.0.

It's possible a 3.1.x will address the issue.

synnick commented on 2020-05-14 09:04

Hi Erik, Pierre

Ok, I accept the arguments. I've changed the prefix to /usr, removed the (incorrect) peg to git to prefer 3.1.3 and disabled what I could of optional pieces of the build.

The package now unpacks its ~2000 files into the following directories:

  • /usr/bin/ (9 binaries 3 soft-links)
  • /usr/include/<binpac, broker, caf, paraglob, zeek>
  • /usr/lib/zeek <- libbroker and libcaf are here
  • /usr/share/man
  • /usr/share/zeek <- .zeek scripts

eschwartz commented on 2020-05-13 20:57

Please convert this package to build from the latest stable release, and optionally create a second package named zeek-git which builds the latest development version from git master.

P.S. Upstream being strange and installing outside of /usr isn't a good reason to do so ourselves, furthermore, ignore their OBS package and look at the project README which doesn't list any --prefix to use.

P.P.S. Arch also does not do gratuitous split packaging, while debian as a matter of policy does. Therefore certainly don't emulate upstream's respect for debian packaging standards in their debian package by introducing debian packaging standards to archlinux.

mcd1992 commented on 2020-05-13 03:33

Package marked for deletion.

plt commented on 2020-02-05 14:22

Hi @synnick

I understand your choice, but I think the point of a Linux distribution is to be consistent: in ArchLinux, packages install under /usr. It is normal that, when installing a software using its source (as opposed to the distribution packages), you install it somewhere under /opt or /usr/local. But when installing an Archlinux or AUR package, one may expect that it installs under /usr.

My 2 cents,


synnick commented on 2020-02-05 14:16

Hi Pierre,

Sorry for the move of the package to /opt/zeek. I've been slowly aligning this package with the style used upstream by Johanna Amann (0xxon) on the OBS found here:

A few months ago, I actually opened a pull to include a zeek PKGBUILD and the response was to stick with /opt/zeek and further split the zeek package into a few different subcomponents (libbroker, zeekctl, zeek-core, etc, etc).

So I intend to follow that style with this PKGBUILD because it will reduce differences across OSes even if it isn't in the standard dirs.

plt commented on 2020-02-05 12:55


I don't think it is a good idea to move the package to /opt/zeek instead of the regular /usr, since we are building a package. Is there a particular reason for this change?



plt commented on 2019-12-19 10:34

Hi! You should add swig to makedepends. Thanks

synnick commented on 2019-11-04 12:02

Updated, thanks for catching that.