Modular PCAP Analysis Server

Example Use Cases

• 1

  Analyze network traffic captures for security and forensic investigations.

• 2

  Troubleshoot network protocols such as DNS, DHCP, ICMP, TCP, and SIP.

• 3

  Integrate PCAP analysis into MCP client workflows with stateless, modular tools.

Description

mcpcap provides protocol-specific analysis tools for PCAP files, supporting DNS, DHCP, ICMP, TCP, SIP, and CapInfos modules. It enables both local and remote PCAP file analysis with JSON-formatted responses optimized for LLM consumption. The server is stateless, extensible, and integrates with MCP clients over stdio or HTTP transports, making it ideal for network security, troubleshooting, and forensic investigations.