I have been at Lawrence Berkeley National Lab since 2001 working in the security groups for high performance computing (NERSC) as well as scientific networking (ESnet). This whole time I have been using Zeek for a variety of interesting things, and have done quite a bit of research and development including high performance clustering and instrumented ssh.