# dfir-pcap-mcp

> dfir-pcap-mcp — gentle-bae-dfir-pcap-mcp. Use this tool when you need to analyze network traffic for incident response and forensics, as it provides a read-only MCP server with 18 tools for pcap analysis, threat hunting, and artifact extraction. It solves problems related to network traffic investigation, threat detection, and evidence collection, accepting pcap files as input and producing actionable intelligence as output. Ideal for security professionals and investigators, it streamlines the process of examining network traffic to identify and respond to potential security threats.

Canonical page: https://skillsregistry.net/skills/gentle-bae-dfir-pcap-mcp  
JSON: https://api.skillsregistry.net/v1/skills/gentle-bae-dfir-pcap-mcp

## Description

MCP server for read-only network traffic incident response and forensics using tshark, offering 18 tools for pcap analysis, threat hunting, and artifact extraction.

## Trust

- **Trust score (0–1):** 0.67
- **Verification tier:** scanned
- **Last scanned:** 2026-08-28

## Facts

- **Version:** 1.0.0
- **Skill type:** atomic
- **Execution layer:** mcp-remote
- **Runtime environment:** api
- **Category:** other
- **Updated:** 2026-08-28

## Source

- **Source listing:** [Glama](https://glama.ai/mcp/servers/ns1kdr68gx)
- **Repository:** <https://github.com/Gentle-bae/dfir-pcap-mcp>

## Use it

Resolve this record through the SkillsRegistry MCP server (no auth, read-only):

```
claude mcp add --transport http --scope user skillsregistry https://api.skillsregistry.net/mcp
```

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "get_skill",
    "arguments": {
      "slug": "gentle-bae-dfir-pcap-mcp"
    }
  }
}
```

REST: `GET https://api.skillsregistry.net/v1/skills/gentle-bae-dfir-pcap-mcp` · pull for local use: `GET https://api.skillsregistry.net/v1/skills/gentle-bae-dfir-pcap-mcp/pull`

---
SkillsRegistry indexes agent skills from public registries and GitHub. Skills we have analysed are scanned with Circle-IR and scored on six dimensions; each listing states its scan coverage. More: https://skillsregistry.net/llms.txt