Seth Hall
Founder at MatchyLabs
Columbus, Ohio, United States
Summary
🤩
Rockstar🎓
Top SchoolSeth Hall is a founder and network visibility expert with 15+ years building high-performance monitoring and security systems, best known for co-creating Zeek and shaping its evolution into a production-grade platform. He bridges research and operations, turning bleeding-edge network analysis ideas from labs like ICSI and LBNL into practical tools used in real-world detection and response. As Corelight’s co-founder and long-time evangelist, and now leading MatchyLabs while advising Corelight, he combines hands-on backend development (notably contributions to Zeek and the netmap project) with strategic product and go-to-market insight. Based in Columbus, Ohio, he also invests in and mentors early-stage tech teams, bringing a rare mix of deep protocol-level expertise and operational pragmatism. An underappreciated strength is his ability to spot practical opportunities that researchers overlook—translating novel detection primitives into scalable telemetry and integration patterns.
15 years of coding experience
21 years of employment as a software developer
Bachelor of Science - BS Geography (Geographic Information Systems), Bachelor of Science - BS Geography (Geographic Information Systems) at The Ohio State University
Stackoverflow
367reputation
6kreached
9answers
0questions
Github Skills (26)
system-programming10
python10
network-analysis10
load-balancing10
c1110
networking10
c1710
network-protocol10
hashing-algorithm10
data-structure9
application-framework9
app-framework9
performance-optimization9
data-structures9
web-framework9
Programming languages (13)
Github contributions (5)
zeek/zeek
Oct 2010 - Jun 2021
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
Role in this project:
Backend Developer
Backend DeveloperContributions:1 release, 24 reviews, 1456 commits in 10 years 10 months
Contributions summary:Seth contributed to Bro's network analysis framework, specifically the Zeek package. Their work focused on enhancing the intelligence framework and supporting the integration of the Collective Intelligence Framework. They implemented initial support for Bro's Intel framework with the Collective Intelligence Framework by adding new fields to records and creating events. The user also worked on improving the overall codebase, including documentation, and introducing features for the SMB2 and NTLM analyzers.
dfirnsmsecurityanalysisnetworking
luigirizzo/netmap
Feb 2016 - Mar 2017
Automatically exported from code.google.com/p/netmap
Role in this project:Back-end Developer
Back-end DeveloperContributions:11 commits, 2 PRs, 1 comment in 1 year 1 month
Contributions summary:Seth primarily worked on implementing and improving features related to load balancing, packet hashing, and performance. Their contributions include the implementation of a 4-tuple hashing function, enhancements to the logging and statistical outputs, and adjustments to the timing of metrics collection. The user also fixed issues related to link wait times and added a busy-wait option, and made a change to a project name to match the project's new name.
pythonospfnfvbgpdpdk
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.