#btest

When PCAPs aren't available, can't be shared, or your script depends on external services, standard BTests need a different approach. Part 2 of Yacin's testing series walks through hand-crafting events and using Zeek's built-in event tracing flag. Read Part 2: https://zeek.org/2026/07/the-cure-for-exceptional-zeek-package-testing-part-2/ #Zeek #NetworkSecurity #BTest #OpenSource

If your Zeek package relies on helper functions to process data before writing to a log, you don't need a PCAP to test that logic. Part 1 of Yacin's new testing series demonstrates how to emulate unit testing frameworks inside BTest using Zeek 6.1's native assert statement. Read the walkthrough: https://zeek.org/2026/07/the-cure-for-exceptional-zeek-package-testing-part-1/ #Zeek #NetworkSecurity #OpenSource #BTest