広告掲載
MCP.so
ログイン

Netforensicmcp MCP Server

@kylecui

リポジトリ

基本情報

カテゴリ

その他

トランスポート

stdio

作者

kylecui

投稿者

Kyle Cui

Netforensicmcp MCP Server について

NetForensicMCP V2.1 is a Model Context Protocol (MCP) server designed to empower Large Language Models (LLMs) with advanced offline network traffic analysis and threat intelligence capabilities. Built on top of Wireshark's tshark, NetForensicMCP provides comprehensive PCAP analys

#wireshark#security#threathunters#threatintelligence#cybersecurity

Netforensicmcp MCP Server の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "NetForensicMCP": {
      "command": "node",
      "args": [
        "index.js"
      ]
    }
  }
}

Netforensicmcp MCP Server のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is NetForensicMCP?

NetForensicMCP (formerly WireMCP) is a Model Context Protocol (MCP) server that empowers LLMs with offline network traffic analysis and threat intelligence capabilities. Built on Wireshark's tshark, it provides PCAP analysis tools for cybersecurity professionals, threat hunters, and network forensics investigators.

How to use NetForensicMCP?

Install Node.js (v16+), Wireshark (tshark in PATH), and clone the repository. Run npm install then node index.js. Configure an MCP client (e.g., Cursor IDE or Claude Desktop) with the path to index.js and the command node.

Key features of NetForensicMCP

  • Smart stream analysis with intelligent chunking for large PCAPs
  • Threat intelligence integration with URLhaus blacklist checking
  • Automated credential extraction across multiple protocols
  • High-frequency IP analysis for proactive threat hunting
  • Paginated stream content extraction and size estimation
  • Legacy live traffic capture for compatibility

Use cases of NetForensicMCP

  • Threat hunting: proactive identification of APT activities and C2 communications
  • Incident response: rapid forensic analysis of network evidence
  • Compliance auditing: credential leak detection and security gap identification
  • IOC extraction: automated indicator of compromise discovery
  • Attack reconstruction: timeline analysis and attack path visualization

よくある質問

1

What are the runtime dependencies?

Requires Node.js v16+, Wireshark/tshark in PATH, and npm for dependency management. Works on Windows, macOS, and Linux.

2

How does NetForensicMCP handle large PCAP files?

It uses intelligent chunking with pagination support, content size estimation, and automated stream segmentation to prevent token overflow.

3

Where does threat intelligence data come from?

Built-in integration with URLhaus (abuse.ch) for comprehensive malware URL database checking.

4

Does NetForensicMCP support live traffic capture?

Legacy `capture_packets` tool is preserved for compatibility, but the focus is on offline forensic analysis.

5

How is the server configured for different MCP clients?

For Cursor IDE, edit `mcp.json` with the path to index.js. For Claude Desktop, edit the appropriate config file (macOS: `~/Library/Application Support/Claude/claude_desktop_config.json`, Windows: `%APPDATA%\Claude\claude_desktop_config.json`).

コメント

「その他」の他のコンテンツ

The Living Bread

The Living Bread

A free remote MCP server for The Living Bread. Bible passages read word for word from a stored public domain text with an evidence label, keyword search and cross references, real churches, gatherings and prayer groups w

P

PickFu MCP

PickFu MCP is a Model Context Protocol (MCP) server that connects AI assistants, developers, marketers, product managers, and AI agents to PickFu's consumer research platform. It enables users to create surveys, conduct

Sequential Thinking

modelcontextprotocol

Model Context Protocol Servers

88.2K

Soar Flight Booking MCP

Soar Flight Booking MCP is a remote MCP server available at https://mcp.soar.flights.

DeepMark

DeepMark helps teachers deliver rapid, consistent marking with meaningful feedback for every student — in a fraction of the time. What once took a week, now takes one free period.

広告掲載