diff --git a/salt/bpf/defaults.yaml b/salt/bpf/defaults.yaml
index e9bc76dfb..5e74c3942 100644
--- a/salt/bpf/defaults.yaml
+++ b/salt/bpf/defaults.yaml
@@ -1,5 +1,4 @@
 bpf:
   pcap: []
   suricata: []
-  zeek:
-    - ip or not ip
+  zeek: []