Mcpcap
Enables Large Language Models to read and analyze network packet captures, providing structured JSON responses about network traffic.
소개
Mcpcap is a modular Python server designed to bridge the gap between Large Language Models (LLMs) and network packet capture (PCAP) files. It allows LLMs to interactively query and analyze network traffic data from both local and remote sources. Leveraging the powerful scapy library, mcpcap parses PCAP files, processes various network protocols through its extensible modular architecture, and provides structured JSON responses, making complex network insights easily consumable by AI for various analytical and diagnostic purposes.
주요 기능
- Provides structured JSON responses for LLM consumption
- Modular Architecture for extensibility
- 2 GitHub stars
- Supports local and remote PCAP file sources
- Seamless integration with LLM clients via Model Context Protocol
- Integrates with Scapy for comprehensive packet parsing
사용 사례
- Identify the most frequently queried domains in DNS traffic
- Determine the top 5 queried domains within a network capture
- Retrieve all DNS queries for a specific domain (e.g., example.com)
Advertisement