Zeek-MCP

Zeek-MCP acts as a friendly bridge between deep network traffic analysis and conversational AI. It allows anyone to "talk" to their network data by connecting the popular Zeek network security monitor to AI assistants like Claude. Instead of manually sifting through complex packet captures or raw data, a user can simply provide a file to their AI and ask questions about what happened on the network, making high-level security auditing much more accessible. For those looking for more control, this tool exposes specific network functions to a Large Language Model (LLM) through the Model Context Protocol. It features two primary capabilities: the `execzeek` tool, which runs Zeek on PCAP files to generate detailed logs, and the `parselogs` tool, which transforms…

Visit Zeek-MCP