ZeqObserver Tap — Network State Daemon
Network-state observation daemon for any host. Observes interface address changes, routing-table shifts, listening-port openings/closings (audit-trail gold for SOC 2 / NIST 800-53 AU-12), per-interface bytes-in/bytes-out deltas, established-connection counts, online↔offline↔degraded transitions. Polls system every Zeqond via psutil (cross-platform: macOS / Linux / Windows). Privacy-first: NEVER captures packet payloads, hashes remote IPs (SHA-256 prefix) before emission, optional skip-private-ranges. Reuses ZeqObserver from the Python agent for transport, batching, outbox replay, HF computation, phase-locked encryption. Roadmap: an eBPF kernel-level companion for higher fidelity (packet drops · syscalls · namespace events).
| Endpoint | GET /zeq-observer-tap.py |
| Auth | none |
| Rate limit | static asset |
| Category | compute |
Parameters
No parameters.
Returns
Userspace daemon. Run: ZEQ_SLUG=… ZEQ_SM_KEY=zsm_… python zeq-observer-tap.py. Same JSON wire format as the other agents.
Example
curl -sS \
"https://zeqsdk.com/zeq-observer-tap.py"
This protocol is a named building block — one of the operations you
compose inside a state contract. Call it directly with
the request above, or invoke it from a contract that fires on your machine's
clock. Browse the whole library at GET /api/protocols; fetch this one at
GET /api/protocols/zeq-observer-tap.