With the rise of the Internet in the mid-1990s came the scourge of Internet attacks. At the time, Vern Paxson was pursuing a work-study Ph.D. at the Lawrence Berkeley National Laboratory (LBNL), with a focus on Internet measurement. The LBNL security staff would occasionally ask him whether his research data happened to have information about a particular attack. It often did, but extracting the activity was a cumbersome process that only provided insight after-the-fact. This led him to develop a system – now named Zeek – to more effectively answer such questions.