AcademyMCP serversDevelopment

Wireshark-MCP

Network, IT and security teams who investigate traffic captures and want to ask questions instead of writing filters by hand.

  • Recommendedour rating
  • 293gitHub stars
  • MITlicence
  • 9 days agolast update
claude mcp add wireshark-mcp -- uvx wireshark-mcp
README.md

Loading the file...

What it does

An MCP server that connects an AI assistant to Wireshark's tshark tool. You provide a packet capture file and ask questions in plain language. The server runs captures, returns protocol statistics, extracts fields and supports security analysis, so answers come from the real packet data.

Use cases

  1. 01Summarise the protocols found in a pcap file
  2. 02Extract specific fields from captured packets
  3. 03Look for suspicious traffic in a capture

Questions about
Wireshark-MCP.

What is Wireshark-MCP used for?

Network, IT and security teams who investigate traffic captures and want to ask questions instead of writing filters by hand. An MCP server that connects an AI assistant to Wireshark's tshark tool. You provide a packet capture file and ask questions in plain language. The server runs captures, returns protocol statistics, extracts fields and supports security analysis, so answers come from the real packet data.

How do I install Wireshark-MCP?

Run this in your terminal: claude mcp add wireshark-mcp -- uvx wireshark-mcp

Is Wireshark-MCP open source?

Yes. The code is on GitHub (bx33661/Wireshark-MCP) under the MIT licence.

Is Wireshark-MCP safe to use?

It passed our automatic scan for credential theft, hidden instructions and risky install commands. Third party open source software. Sabemos AI does not maintain it. Check the code and permissions before you connect it to company data.