When running as part of your Zeek installation this plugin will produce three log files containing metadata extracted from any Tabular Data Stream (TDS) traffic observed on TCP port 1433.
zeek-plugin-tds is distributed as a Zeek package and is compatible with the zkg command line tool.
This code is made available under the BSD-3-Clause license. Guidelines for contributing are available as well as a pull request template. A Dockerfile has been included in the repository to assist with setting up an environment for testing any changes to the plugin.