Netforensicmcp

Created By

kylecui4 months ago

NetForensicMCP V2.1 is a Model Context Protocol (MCP) server designed to empower Large Language Models (LLMs) with advanced offline network traffic analysis and threat intelligence capabilities. Built on top of Wireshark's tshark, NetForensicMCP provides comprehensive PCAP analysis tools for cybersecurity professionals, threat hunters, and network forensics investigators.

# wireshark

# security

Overview Content Tools Comments

Overview

What is NetForensicMCP?

How to use NetForensicMCP?

To use NetForensicMCP, clone the repository from GitHub, install the necessary dependencies using npm, and launch the MCP server with the command node index.js.

Key features of NetForensicMCP?

Smart Stream Analysis for handling large PCAP files
Threat Intelligence Integration with URLhaus blacklist checking
Automated Credential Extraction across multiple protocols
High-Frequency IP Analysis for proactive threat hunting

Use cases of NetForensicMCP?

Proactive threat hunting for APT activities
Rapid forensic analysis during incident response
Compliance auditing for credential leak detection
Automated IOC extraction and attack reconstruction

FAQ from NetForensicMCP?

What operating systems are supported?

Windows, macOS, and Linux are supported.
Is Wireshark required?

Yes, Wireshark (tshark) must be installed and in the system PATH.
Can it handle large PCAP files?

Yes, it features intelligent content chunking to manage large files efficiently.

Server Config

{
  "mcpServers": {
    "NetForensicMCP": {
      "command": "node",
      "args": [
        "index.js"
      ]
    }
  }
}

Recommend Servers

TraeBuild with Free GPT-4.1 & Claude 3.7. Fully MCP-Ready.

Visual Studio Code - Open Source ("Code - OSS")Visual Studio Code

EdgeOne Pages MCPAn MCP service designed for deploying HTML content to EdgeOne Pages and obtaining an accessible public URL.

TimeA Model Context Protocol server that provides time and timezone conversion capabilities. This server enables LLMs to get current time information and perform timezone conversions using IANA timezone names, with automatic system timezone detection.

AiimagemultistyleA Model Context Protocol (MCP) server for image generation and manipulation using fal.ai's Stable Diffusion model.

MCP AdvisorMCP Advisor & Installation - Use the right MCP server for your needs

ChatWiseThe second fastest AI chatbot™

Zhipu Web SearchZhipu Web Search MCP Server is a search engine specifically designed for large models. It integrates four search engines, allowing users to flexibly compare and switch between them. Building upon the web crawling and ranking capabilities of traditional search engines, it enhances intent recognition capabilities, returning results more suitable for large model processing (such as webpage titles, URLs, summaries, site names, site icons, etc.). This helps AI applications achieve "dynamic knowledge acquisition" and "precise scenario adaptation" capabilities.

Tavily Mcp

Playwright McpPlaywright MCP server

Howtocook Mcp基于Anduin2017 / HowToCook （程序员在家做饭指南）的mcp server，帮你推荐菜谱、规划膳食，解决“今天吃什么“的世纪难题； Based on Anduin2017/HowToCook (Programmer's Guide to Cooking at Home), MCP Server helps you recommend recipes, plan meals, and solve the century old problem of "what to eat today"

CursorThe AI Code Editor

Serper MCP ServerA Serper MCP Server

MiniMax MCPOfficial MiniMax Model Context Protocol (MCP) server that enables interaction with powerful Text to Speech, image generation and video generation APIs.

WindsurfThe new purpose-built IDE to harness magic

Baidu Map百度地图核心API现已全面兼容MCP协议，是国内首家兼容MCP协议的地图服务商。

Context7Context7 MCP Server -- Up-to-date code documentation for LLMs and AI code editors

Jina AI MCP ToolsA Model Context Protocol (MCP) server that integrates with Jina AI Search Foundation APIs.

BlenderBlenderMCP connects Blender to Claude AI through the Model Context Protocol (MCP), allowing Claude to directly interact with and control Blender. This integration enables prompt assisted 3D modeling, scene creation, and manipulation.

DeepChatYour AI Partner on Desktop

Amap Maps高德地图官方 MCP Server