Containerized MCP server for parsing OT/ICS packet captures. Uses tshark to dissect Modbus/TCP and BACnet/IP traffic from saved PCAP files and returns structured JSON -- decoded transactions and a basic device inventory -- that an LLM can reason over directly. Designed for use with Claude Code. Runs with a read-only evidence mount
1 file for Claude Code: otparse-mcp CLAUDE.md — 806 tokens loaded in every session.
CLAUDE.md A 806 tok These files are desvert/otparse-mcp's own configuration — they tell Claude Code how to work on this repository, so they are not mods to install elsewhere. Copy one as a starting point and replace the parts that are about this project.