Zeek

关于

Zeek-MCP provides utilities for building an MCP (Model Context Protocol) server that can be integrated with conversational AI clients. It allows these clients to interact with Zeek, a powerful network analysis framework, to analyze PCAP files and parse Zeek log files. This enables users to leverage natural language to query and understand complex network data through their preferred conversational AI interface. The server supports Server-Sent Events (SSE) and stdio transport protocols.

主要功能

• 2 GitHub stars
• Executes Zeek on PCAP files.
• Parses Zeek log files into a structured DataFrame.
• Command-line interface for MCP server management.
• Supports Server-Sent Events (SSE) and stdio transport protocols.
• Integration examples provided for Claude Desktop and 5ire MCP clients.

使用案例

• Network traffic analysis through conversational AI.
• Automated security incident investigation.
• Real-time network monitoring and alerting.