What does Wireshark MCP Server do?
It is an MCP server that wraps PyShark to let AI assistants (e.g., Claude) perform live packet captures, read pcap files, analyze traffic, and list interfaces.
Wireshark MCP Server
@A-G-U-P-T-A
Basic information
About Wireshark MCP Server
TShark/Wireshark MCP server for network packet analysis via Claude
Wireshark MCP Server config
No standard config provided
This server doesn't expose a parseable MCP config block in its README. See the repository for install instructions.
RepositoryWireshark MCP Server tools
Tool list not available yet
This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.
We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.
Overview
What is Wireshark MCP Server?
Wireshark MCP Server exposes PyShark functionality through the Model Context Protocol (MCP), allowing AI assistants like Claude to interact with network packet capture and analysis capabilities.
How to use Wireshark MCP Server?
Install dependencies with uv add mcp[cli] pyshark or pip install mcp[cli] pyshark, clone the repository, then run the server in development mode with mcp dev pyshark_mcp.py or install it in Claude Desktop with mcp install pyshark_mcp.py.
Key features of Wireshark MCP Server
- Lists available network interfaces
- Captures live packets from a network interface
- Reads and analyzes packet capture (pcap) files
- Analyzes network traffic patterns from captures
- Captures targeted traffic by host, port, or protocol
- Detects and reports network protocols in use
- Provides capture history and configuration resources
Use cases of Wireshark MCP Server
- An AI assistant checking available network interfaces before a capture
- Capturing live HTTP traffic for a specified duration
- Analyzing a previously saved pcap file to extract insights
- Detecting network protocols and patterns in a traffic capture
Frequently asked questions
What are the runtime requirements?
Python 3.8+, TShark (Wireshark’s command-line component) installed separately, and administrative/root privileges for live packet capture.
How do I run or install the server?
Use `mcp dev pyshark_mcp.py` for development mode with the MCP Inspector, or `mcp install pyshark_mcp.py` to install it directly in Claude Desktop.
What permissions are needed?
Network packet capture often requires administrative/root privileges, and users must have authorization to capture traffic and comply with applicable laws.
Can I extend the server’s functionality?
Yes, by adding more advanced capture/analysis tools, implementing filters, creating specialized protocol analysis functions, or extending the capture history.
More Other MCP servers
Health by Dr Brad
Dr Brad StanfieldHealth by Dr Brad works out a health plan from your own results: which screening is due at your age, and evidence-based suggestions, each with the reason and the published guideline or study behind it. Your record is one
Awesome Mlops
visengerA curated list of references for MLOps
14.0K
Screenpipe
screenpipeYC (S26) | Open Computer History | Continuously record your company computer work, map your workflows, help you find work worth automating, and power your agents' context
22.0K
Handl
Handl speaks the Model Context Protocol. Your whole billing operation — projects, invoices, clients, reports, approvals — as tools any AI assistant can call, inside your autonomy rules.
Reactive Resume
amruthpillaiA one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today!
39.5K
Comments