Zeek - one of the strengths of the tool, the fine monitoring of connections

Zeek + R - geographic origins of connections to a Tor relay

Zeek - Using some intelligence

Zeek - Adding GeoIP to 'conn.log'

Zeek - Repository for packages

Zeek ?