PCAP Network Analysis

A modular Python MCP server for analyzing network packet captures (PCAP files) that enables LLMs to perform structured analysis of DNS and DHCP traffic from local directories or remote HTTP sources. Built with scapy for packet parsing and FastMCP for server integration, it features protocol-specific modules with extensible architecture, specialized analysis prompts for security investigation and network troubleshooting, and support for both .pcap and .pcapng formats with configurable packet limits. The implementation includes robust error handling, temporary file management for remote sources, and comprehensive statistics generation, making it valuable for cybersecurity analysts conducting threat detection, network engineers troubleshooting connectivity issues, and digital forensics investigators requiring detailed packet-level analysis with AI-assisted interpretation.

Source

Repository: https://github.com/mcpcap/mcpcap