Zeek

소개

Zeek-MCP provides utilities for building an MCP (Model Context Protocol) server that can be integrated with conversational AI clients. It allows these clients to interact with Zeek, a powerful network analysis framework, to analyze PCAP files and parse Zeek log files. This enables users to leverage natural language to query and understand complex network data through their preferred conversational AI interface. The server supports Server-Sent Events (SSE) and stdio transport protocols.

주요 기능

• 2 GitHub stars
• Executes Zeek on PCAP files.
• Parses Zeek log files into a structured DataFrame.
• Command-line interface for MCP server management.
• Supports Server-Sent Events (SSE) and stdio transport protocols.
• Integration examples provided for Claude Desktop and 5ire MCP clients.

사용 사례

• Network traffic analysis through conversational AI.
• Automated security incident investigation.
• Real-time network monitoring and alerting.