Run, Zeek, Run!, Jim Mellander
Channel: Zeek
Date: 2020-10-27

Run, Zeek, Run!

Can zeek run up to 25% faster *without modifications to source code or scripts*? In this talk, we will discuss how we've accomplished this. Since the dawn of the computer age, squeezing the highest performance possible out of a program has always been an important consideration. Programmers can provide hints to a compiler which assist in optimizing code. However, ""programmers are notoriously bad at predicting how their programs actually perform"" (from the GCC manual), and hence automated profiling tools emerged. In this presentation, we discuss the history of compiler code generation and optimization, demonstrate the use of modern compiler tools to optimize Zeek performance, provide benchmarks of the performance boost that we experienced, and provide information on how sites can similarly optimize their Zeek installation.

Presenter: Jim Mellander, ESnet

Jim has worked with Zeek since the turn of the century, both in operational cybersecurity and development.

Upcoming Zeek webinars and events: https://zeek.org/events/
ZeekWeek 2019 info: https://zeek.org/2019/11/13/zeekweek-2019-summary-and-slides/
Learn more about Zeek and connecting with the community can be found at: https://zeek.org/"