Yeah, zeek is a great tool. It took me a while to recognize it, though, the last time I used it, it was still called “bro”.