What does Wireshark MCP Server do?
It is an MCP server that wraps PyShark to let AI assistants (e.g., Claude) perform live packet captures, read pcap files, analyze traffic, and list interfaces.
Wireshark MCP Server
@A-G-U-P-T-A
Basic information
About Wireshark MCP Server
TShark/Wireshark MCP server for network packet analysis via Claude
Wireshark MCP Server config
No standard config provided
This server doesn't expose a parseable MCP config block in its README. See the repository for install instructions.
RepositoryWireshark MCP Server tools
Tool list not available yet
This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.
We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.
Overview
What is Wireshark MCP Server?
Wireshark MCP Server exposes PyShark functionality through the Model Context Protocol (MCP), allowing AI assistants like Claude to interact with network packet capture and analysis capabilities.
How to use Wireshark MCP Server?
Install dependencies with uv add mcp[cli] pyshark or pip install mcp[cli] pyshark, clone the repository, then run the server in development mode with mcp dev pyshark_mcp.py or install it in Claude Desktop with mcp install pyshark_mcp.py.
Key features of Wireshark MCP Server
- Lists available network interfaces
- Captures live packets from a network interface
- Reads and analyzes packet capture (pcap) files
- Analyzes network traffic patterns from captures
- Captures targeted traffic by host, port, or protocol
- Detects and reports network protocols in use
- Provides capture history and configuration resources
Use cases of Wireshark MCP Server
- An AI assistant checking available network interfaces before a capture
- Capturing live HTTP traffic for a specified duration
- Analyzing a previously saved pcap file to extract insights
- Detecting network protocols and patterns in a traffic capture
Frequently asked questions
What are the runtime requirements?
Python 3.8+, TShark (Wireshark’s command-line component) installed separately, and administrative/root privileges for live packet capture.
How do I run or install the server?
Use `mcp dev pyshark_mcp.py` for development mode with the MCP Inspector, or `mcp install pyshark_mcp.py` to install it directly in Claude Desktop.
What permissions are needed?
Network packet capture often requires administrative/root privileges, and users must have authorization to capture traffic and comply with applicable laws.
Can I extend the server’s functionality?
Yes, by adding more advanced capture/analysis tools, implementing filters, creating specialized protocol analysis functions, or extending the capture history.
More Other MCP servers
Hindsight
vectorize-ioHindsight: Agent Memory That Learns
50.4K
The Living Bread
The Living BreadA free remote MCP server for The Living Bread. Bible passages read word for word from a stored public domain text with an evidence label, keyword search and cross references, real churches, gatherings and prayer groups w
Volley.sh
VolleyA good sequence diagram can solve almost any communication problem in engineering. Volley lets your agent write them as plain text, with the real request and response payloads on every arrow. It checks its own syntax wi
Figs, Relationship Expert
Figs O'Sullivan, LMFTCouples therapist Figs O'Sullivan (LMFT, 17 years, endorsed by Sue Johnson, creator of EFT) inside your AI. Ask relationship questions answered from his clinical writing, name the pattern in a fight, get a three-step rep
Glasswarp
GlasswarpSee and control a real Windows PC you own — from any MCP client, locally or remotely. Observe (UIA + screenshots), click/type/drag/scroll, launch apps, owner Live View. BYOH: your machine, your key.
Comments