Netforensicmcp

Created By

kylecuia year ago

NetForensicMCP V2.1 is a Model Context Protocol (MCP) server designed to empower Large Language Models (LLMs) with advanced offline network traffic analysis and threat intelligence capabilities. Built on top of Wireshark's tshark, NetForensicMCP provides comprehensive PCAP analysis tools for cybersecurity professionals, threat hunters, and network forensics investigators.

# wireshark

# security

Overview Content Tools Comments

Overview

What is NetForensicMCP?

How to use NetForensicMCP?

To use NetForensicMCP, clone the repository from GitHub, install the necessary dependencies using npm, and launch the MCP server with the command node index.js.

Key features of NetForensicMCP?

Smart Stream Analysis for handling large PCAP files
Threat Intelligence Integration with URLhaus blacklist checking
Automated Credential Extraction across multiple protocols
High-Frequency IP Analysis for proactive threat hunting

Use cases of NetForensicMCP?

Proactive threat hunting for APT activities
Rapid forensic analysis during incident response
Compliance auditing for credential leak detection
Automated IOC extraction and attack reconstruction

FAQ from NetForensicMCP?

What operating systems are supported?

Windows, macOS, and Linux are supported.
Is Wireshark required?

Yes, Wireshark (tshark) must be installed and in the system PATH.
Can it handle large PCAP files?

Yes, it features intelligent content chunking to manage large files efficiently.

Try in Playground

Server Config

{
  "mcpServers": {
    "NetForensicMCP": {
      "command": "node",
      "args": [
        "index.js"
      ]
    }
  }
}

Project Info

Created At

a year ago

Updated At

a year ago

Author Name

kylecui

Star

Language

License

Recommend Servers

View All

Saudi Arabia Payments Mcp

@junter1989k-ai

11 days ago

302_sandbox_mcp

@302ai

Create a remote sandbox that can execute code/run commands/upload and download files. 创建远程沙盒，可以执行代码/运行命令/上传下载文件

a year ago

Github

@modelcontextprotocol

Repository management, file operations, and GitHub API integration

a year ago

mcp-server-flomo MCP Server

@chatmcp

Write notes to Flomo

JavaScript

a year ago

11 days ago

Language models generate; Concordance verifies. The verify tool checks a claim deterministically (no model in the loop) and returns HOLDS / BROKEN / INCOMPLETE with the worked reasoning and a sealed receipt (content_hash + cite_url) that re-fetches byte-identical or not at all. Also: ranked search over an ~11k-record library, seal_fetch to re-verify any receipt, redact to strip PII before text travels, and a sealed connection graph. Runs sovereign/offline too (stdlib-first Python). A public false-positive benchmark covers every domain: the engine has never sealed a falsehood. 38 tools live; remote endpoint at https://narrowhighway.com/mcp.

11 days ago

Papaya Pay Any Bill

@Papaya

Ready for a new way to bill pay? Pay any bill in a snap, right from a chat. Describe or snap a photo of your bill (electric, water, gas, internet, phone, medical, credit card, rent, parking tickets, traffic violations and more) and Papaya reads it, then hands you a secure link to pay by card. Fast, secure, and no juggling twelve logins, with full or partial payments and status updates. Powered by Papaya (papayapay.com).

11 days ago

11 days ago

11 days ago

An MCP service designed for deploying HTML content to EdgeOne Pages and obtaining an accessible public URL.

TypeScript

a year ago

Ivory Coast Payments Mcp

11 days ago

11 days ago

@modelcontextprotocol

Web and local search using Brave's Search API

a year ago

11 days ago

11 days ago

Official Firecrawl MCP Server - Adds powerful web scraping to Cursor, Claude and any other LLM clients.

JavaScript

a year ago

Jordan Payments Mcp

@junter1989k-ai

11 days ago

Slack

@modelcontextprotocol

Channel management and messaging capabilities

a year ago

Mailtrap Email Sending MCP

@Mailtrap

An MCP server that provides a tool for sending transactional emails via Mailtrap

a year ago

11 days ago

GBOX provides environments for AI Agents to operate computer and mobile devices. Mobile Scenario: Your agents can use GBOX to develop/test android apps, or run apps on the Android to complete various tasks(mobile automation). Desktop Scenario: Your agents can use GBOX to operate desktop apps such as browser, terminal, VSCode, etc(desktop automation). MCP: You can also plug GBOX MCP to any Agent you like, such as Cursor, Claude Code. These agents will instantly get the ability to operate computer and mobile devices.

a year ago

Norway Payments Mcp

@junter1989k-ai

11 days ago

Perplexity Ask MCP Server

@ppl-ai

A Model Context Protocol Server connector for Perplexity API, to enable web search without leaving the MCP ecosystem.

JavaScript

a year ago

Aws Kb Retrieval Server

@modelcontextprotocol

An MCP server implementation for retrieving information from the AWS Knowledge Base using the Bedrock Agent Runtime.