Loading connector details…
Loading connector details…
Choose a unique username to continue using AgentHotspot
by 0xKoda • Analytics & Monitoring
An MCP server that exposes tshark-based tools to let LLMs capture, analyze, and enrich live or recorded network traffic for threat hunting and diagnostics.
Inspect live network packets and extract structured JSON packet fields (IPs, ports, HTTP methods) for analysis or reasoning.
Perform threat-hunting workflows by checking captured IPs against URLhaus and other threat feeds.
Analyze PCAP files, extract potential credentials, summarize protocol usage, and generate human-readable reports from packet data.
WireMCP is an MCP server that wraps Wireshark's tshark to provide LLMs with structured, JSON-formatted network context. It offers live packet capture, protocol summary statistics, conversation tracking, PCAP analysis, credential extraction, and basic IOC checks (URLhaus). This enables agents to perform real-time traffic analysis, post-capture forensic work, and integrate simple threat intelligence into reasoning. The project is open-source and intended to run locally where tshark is available.
Scores are informational only and provided “as is” without warranty. AgentHotspot assumes no liability for actions taken based on these ratings.