A QUIC protocol analyzer for Zeek, based on Spicy. This analyzer tries to be compabile with QUIC IETF version 1.
Updates via Zeek slack and/or zeek/zeek#2326. Feel free to contribute via issues/PR's. This repository will probably be forked/moved/merged into some other repository in the future. This code is merely a starting point for future improvements.
Clone locally and build with:
git clone https://github.com/fox-ds/spicy-quic.git
cd spicy-quic && zkg install .or without the use of zkg:
mkdir -p build && cd build && cmake .. && cmake --build .
zeek -Cr ../testing/Traces/quic_win11_firefox_google.pcap spicy-modules/quic.hlto