Zeek 9.0 released as LTS for network security monitoring

The Zeek project released 9.0, an LTS version of its network security monitoring system. It adds cluster event streaming, parsing of encapsulated traffic (GRE, VXLAN) and the Spicy 2.0 parser generator with up to 40% faster compilation and support for QUIC-v2 and HTTP/3.

• Release includes about 1,300 commits and 400 merged pull requests
• Spicy 2.0 speeds parser compilation up to 40% and supports HTTP/3
• More than 30 CVE-level fixes and stricter default policies
• Zeek 9.1 expected in early 2027 with AI anomaly detection