daedalus avatar

Mcp Pcapy Ng

daedalus/mcp-pcapy-ng

This wraps pcapy-ng to give you packet capture operations through MCP. You get tools to list network interfaces with findalldevs, open live captures with open_live, read from pcap files with open_offline, and apply BPF filters with compile and pcap_setfilter. The usual workflow is opening a capture handle, optionally setting a filter for specific traffic, then reading packets with pcap_read. Reach for this when you need to analyze network traffic or debug protocol issues from within Claude, whether you're working with live interfaces or existing pcap files. It exposes the core pcapy-ng API including non-blocking modes, datalink types, and direction constants for packet filtering.

tools
14
transport
STDIO
last updated
Apr 4, 2026

Tools

14 tools

Public tool metadata for what this MCP can expose to an agent.

findalldevsList all available network interfaces

List all available network interfaces

No parameter schema in public metadata yet.

lookupdevGet the default network device

Get the default network device

No parameter schema in public metadata yet.

open_liveOpen a live network interface for packet capture

Open a live network interface for packet capture

No parameter schema in public metadata yet.

open_offlineOpen a pcap file for reading

Open a pcap file for reading

No parameter schema in public metadata yet.

createCreate a packet capture handle

Create a packet capture handle

No parameter schema in public metadata yet.

compileCreate a BPF filter program

Create a BPF filter program

No parameter schema in public metadata yet.

pcap_readRead packets from a pcap handle

Read packets from a pcap handle

No parameter schema in public metadata yet.

pcap_datalinkGet the data link type

Get the data link type

No parameter schema in public metadata yet.

pcap_setfilterAttach a BPF filter

Attach a BPF filter

No parameter schema in public metadata yet.

pcap_getnonblockGet non-blocking status

Get non-blocking status

No parameter schema in public metadata yet.

pcap_setnonblockSet non-blocking mode

Set non-blocking mode

No parameter schema in public metadata yet.

get_dlt_namesGet DLT constant mappings

Get DLT constant mappings

No parameter schema in public metadata yet.

get_pcap_directionsGet direction constant mappings

Get direction constant mappings

No parameter schema in public metadata yet.

get_constantsGet all constants

Get all constants

No parameter schema in public metadata yet.

Sponsors

Readme

mcp-pcapy-ng

MCP server exposing pcapy-ng packet capture functionality.

PyPI Python Ruff

mcp-name: io.github.daedalus/mcp-pcapy-ng

Install

pip install mcp-pcapy-ng

Usage

The MCP server provides tools for network packet capture using pcapy-ng:

from mcp_pcapy_ng import mcp
mcp.run()

Or via command line:

mcp-pcapy-ng

Available Tools


View the full README on GitHub

Details

Repository
github.com/daedalus/mcp-pcapy-ng
Package
mcp-pcapy-ng
Transport
STDIO
Registry
MCP registry, active

More from daedalus