About
Wire bridges the gap between raw network data and LLM comprehension by capturing and processing live network data using Wireshark's `tshark`. It exposes tools to MCP clients that enhance LLM understanding of network activity, enabling tasks like threat hunting, network diagnostics, and anomaly detection. By providing structured outputs like JSON and statistics, Wire equips LLMs with the context needed for in-depth network analysis and narrative generation.
Key Features
- Checks IPs against the URLhaus blacklist for threat intelligence.
- 65 GitHub stars
- Analyzes PCAP files to provide comprehensive packet data in JSON format.
- Delivers TCP/UDP conversation statistics to track communication flows.
- Provides protocol hierarchy statistics for an overview of traffic composition.
- Captures live network traffic and returns raw packet data as JSON.
Use Cases
- Threat hunting and identifying malicious network activity.
- Network diagnostics and troubleshooting.
- Anomaly detection in network traffic.