mcpcap

Created at 2 months ago

by mcpcap

starstarstarstarstar

A modular Python MCP (Model Context Protocol) Server for analyzing PCAP files. mcpcap enables LLMs to read and analyze network packet captures with protocol-specific analysis tools that accept local file paths or remote URLs as parameters (no file uploads - provide the path or URL to your PCAP file).

Categories

research-and-data

Tags

pcap

network

analysis

mcpcap

What is mcpcap?

mcpcap is a modular Python MCP (Model Context Protocol) Server designed for analyzing PCAP files. It allows LLMs to read and analyze network packet captures using protocol-specific analysis tools that accept local file paths or remote URLs as parameters, without requiring file uploads.

How to use mcpcap?

To use mcpcap, install it via pip, start the MCP server, and connect your MCP client to analyze PCAP files by providing the file path or URL.

Key features of mcpcap?

  • Stateless MCP tools that accept PCAP file paths or URLs as parameters.
  • Modular architecture with DNS, DHCP, ICMP, and CapInfos modules.
  • Support for local and remote PCAP file analysis.
  • Integration with Scapy for comprehensive packet parsing.
  • JSON responses optimized for LLM consumption.

Use cases of mcpcap?

  1. Analyzing DNS traffic for security and performance issues.
  2. Monitoring DHCP transactions for network administration.
  3. Diagnosing ICMP connectivity issues and network path analysis.
  4. Extracting metadata and statistics from PCAP files.

FAQ from mcpcap?

  • Can mcpcap analyze files from remote URLs?

Yes! mcpcap supports analyzing PCAP files from both local storage and remote URLs.

  • Is mcpcap free to use?

Yes! mcpcap is open-source and free to use for everyone.

  • What protocols does mcpcap support?

mcpcap currently supports DNS, DHCP, ICMP, and CapInfos analysis.

View More