广告合作
MCP.so
登录

MCP Wireshark

@khuynh22

代码仓库

基本信息

分类

其他

许可证

MIT

传输方式

stdio

作者

khuynh22

提交者

Khang Nguyen Huynh

关于 MCP Wireshark

An MCP server that integrates Wireshark/tshark with AI tools and IDEs. Capture live traffic, parse .pcap files, apply display filters, follow streams, and export JSON - all via Claude Desktop, VS Code, or CLI. Cross‑platform, typed, tested, and pip‑installable.

#wireshark#tshark#network#pcap#packet-capture#network-analysis#security#iec61850

MCP Wireshark 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "wireshark": {
      "command": "mcp-wireshark",
      "args": []
    }
  }
}

MCP Wireshark 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is MCP Wireshark?

MCP Wireshark is a community-maintained MCP server that gives AI assistants direct access to Wireshark/tshark packet captures. It allows users to summarize .pcap files, follow TCP streams, filter for specific protocols, and capture live traffic without leaving the chat.

How to use MCP Wireshark?

Install the package with pip install mcp-wireshark and add it to Claude Code using claude mcp add --transport stdio --scope user mcp-wireshark -- mcp-wireshark. The server works with any MCP client (Claude Desktop, VS Code, Cursor, etc.) and requires tshark to be installed and on the system PATH.

Key features of MCP Wireshark

  • 14 tools split into read and write categories
  • Read tools: summarize_pcap, display_filter, follow_tcp/udp, expert_info, decode_protocol, analyze_iec61850, and more
  • Write tools: live_capture (capped at 5 min / 10k packets) and export_json
  • All read tools annotated with MCP readOnlyHint for safety
  • Security: file path validation, no shell metacharacters, no shell=True, hard caps on packets and time
  • Supports IEC 61850 analysis (GOOSE, SV, MMS)

Use cases of MCP Wireshark

  • Summarize an unknown packet capture to see I/O stats, protocol hierarchy, and top talkers
  • Follow a TCP or UDP stream and extract its payload
  • Filter a capture with Wireshark display filters for specific protocols (HTTP, DNS, TLS, etc.)
  • Capture live traffic from a network interface with a display filter
  • Export packets from a pcap to a JSON file for further analysis

常见问题

1

What prerequisites are required to run MCP Wireshark?

Python 3.10+ and Wireshark installed with `tshark` reachable on the system `PATH`.

2

How can I verify the installation?

Inside Claude Code, ask the assistant to "Run check_installation." If `tshark` is on the `PATH`, it returns the version.

3

How do I capture live traffic with MCP Wireshark?

Use the `live_capture` tool. It captures traffic from a specified interface, capped at 5 minutes or 10,000 packets, and can be combined with a display filter.

4

What should I do if `tshark` is not found on Windows?

Add the Wireshark installation directory (e.g., `C:\Program Files\Wireshark`) to the system `PATH` environment variable, then restart the terminal and Claude Code.

5

Does MCP Wireshark support IEC 61850 protocols?

Yes, the `analyze_iec61850` tool provides health triage for GOOSE, SV, and MMS captures, including gap detection, TTL violations, and MMS errors.

评论

其他 分类下的更多 MCP 服务器

DeepMark

DeepMark helps teachers deliver rapid, consistent marking with meaningful feedback for every student — in a fraction of the time. What once took a week, now takes one free period.

Klarix Intelligence Engine

Klarix

B2B competitive intelligence, live sales battlecards, 5-axis ICP prospect fit scoring, and tech stack teardowns over MCP and REST with cited public-web evidence.

der die das – German noun genders (Lingviko)

Lingviko

The article (der, die, das) of 90,000 German nouns, compounds included, plus a checker that finds wrong articles in German text (“mit der Zug” → dem). Uses dictionary data, not AI guessing. Free, no login.

🚀 Model Context Protocol (MCP) Curriculum for Beginners

microsoft

This open-source curriculum introduces the fundamentals of Model Context Protocol (MCP) through real-world, cross-language examples in .NET, Java, TypeScript, JavaScript, Rust and Python. Designed for developers, it focuses on practical techniques for building modular, scalable,

16.7K

Figs, Relationship Expert

Figs O'Sullivan, LMFT

Couples therapist Figs O'Sullivan (LMFT, 17 years, endorsed by Sue Johnson, creator of EFT) inside your AI. Ask relationship questions answered from his clinical writing, name the pattern in a fight, get a three-step rep

广告合作