Zeek Web GUI Analyzer

🔍 The first Zeek Web GUI with built-in AI to analyze your PCAP files!

---

📚 Table of Contents

• 🚀 Features
• 🔧 Requirements
• 📦 Python Dependencies
• 🔑 Gemini API Key
• 🚀 Usage
• 💡 Examples
• 📁 Project Structure
• 🤝 Contributing
• 📜 License

---

🚀 Features

• 📁 PCAP/PCAPNG Upload
  Easily upload .pcap or .pcapng files through the web interface.

• ⚙️ Automatic Log Generation with Zeek
  Uploaded files are processed using Zeek, generating 20+ types of logs.

• 🔍 Log Filtering Interface
  Browse and filter logs through the GUI to focus on relevant network activity.

• 🤖 AI-Powered Analysis
  Analyze logs with an integrated LLM (powered by Gemini API) for contextual insights.

• 🎯 Filtered Log Analysis
  Send only filtered logs to the AI to optimize performance and precision.

---

🔑 Gemini API Key

To enable the AI analysis feature:

1. Get your key from Google Gemini API
2. Put it in /app/app.py file

---

🚀 Usage

1. Clone the repository

   git clone https://github.com/Gabbo01/ZeekWG
   cd ZeekWG

2. Build and start services with Docker Compose

   Ensure you have Docker and Docker Compose installed on your system.

   docker compose build
   docker compose up -d 

3. Open your browser

   http://localhost:5000
   

4. Upload your .pcap / .pcapng file Logs will be generated automatically.

5. Filter logs and run AI analysis as needed

---

💡 Examples

✅ Example 1: Full Log Analysis with AI

1. Upload a .pcap file
2. Click "Analizza tutti i log"
3. The AI provides a complete security overview

---

🔬 Example 2: Focused Log Analysis

1. Upload a .pcap file
2. Open conn.log
3. Apply a filter with "Applica filtri" and analyze truncated data

---

📁 Project Structure

app/
├── app.py                 # Main Python Flask application
├── templates/             # HTML templates
├── uploads/               # Uploaded PCAPs
├── zeek_logs/             # Zeek-generated logs

---

🤝 Contributing

Contributions are welcome!
Open an issue or submit a PR for bugs, improvements, or ideas 💡

---

📜 License

Licensed under the Apache 2.0 License.
See the LICENSE file for more details.