Ask HN: Detecting LLM API Calls: A Zeek Odyssey

3 pointsposted 14 hours ago
by newslonenokgobo

Item id: 41725072

1 Comments

derekoc

2 hours ago

LLM API requests made via browsers may have different HTTP headers, user-agent strings, or timing patterns than requests made programmatically via Python, JavaScript, etc. You might want to investigate if browser requests include headers that are not present in programmatic requests and adjust your detection rules accordingly.