Zeek
Enables conversational AI clients to analyze network traffic data using the Zeek network security monitoring engine.
About
Zeek-MCP provides utilities for building an MCP (Model Context Protocol) server that can be integrated with conversational AI clients. It allows these clients to interact with Zeek, a powerful network analysis framework, to analyze PCAP files and parse Zeek log files. This enables users to leverage natural language to query and understand complex network data through their preferred conversational AI interface. The server supports Server-Sent Events (SSE) and stdio transport protocols.
Key Features
- 2 GitHub stars
- Executes Zeek on PCAP files.
- Parses Zeek log files into a structured DataFrame.
- Command-line interface for MCP server management.
- Supports Server-Sent Events (SSE) and stdio transport protocols.
- Integration examples provided for Claude Desktop and 5ire MCP clients.
Use Cases
- Network traffic analysis through conversational AI.
- Automated security incident investigation.
- Real-time network monitoring and alerting.
Sponsored