WiresharkCAUTION
Wireshark-MCP,Give your AI assistant a packet analyzer. Drop a .pcap file, ask questions in plain English — get answers backed by real tshark data.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Wireshark MCP
Give your AI assistant a packet analyzer.
Drop a `.pcap` file, ask questions in plain English — get answers backed by real `tshark` data.
English • 中文 • Docs • Changelog • Roadmap • Contributing
What is this?
An MCP server that wraps tshark (and optional Wireshark suite tools) into a structured analysis interface. Works with Claude Desktop, Claude Code, Cursor, VS Code, and 18+ other MCP clients.
You: "Find all DNS queries going to suspicious domains in this capture." Claude: [calls wireshark_extract_dns_queries → wireshark_d
b3e58482df43OBSERVED · 2026-10-06Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add wireshark-mcp -- None wireshark-mcp==3.0.0
Exposed tools (34)
29 read · 4 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.
| Tool | Risk | Description |
|---|---|---|
wireshark_aggregate | read | [Primary statistics] Full-filter counts, groups, distinct values, numeric metrics, top-k, and time buckets. Field lists are comma-separated. |
wireshark_capture | read | Capture live network traffic. capture_filter: BPF syntax. ring_buffer: |
wireshark_decode_as | read | [Dissection] Decode-as for non-standard ports. Rules: |
wireshark_decrypt_tls | read | [Decrypt] Decrypt TLS traffic using SSLKEYLOGFILE, show HTTP data. |
wireshark_decrypt_wpa | read | [Decrypt] Decrypt WPA/WPA2 traffic with passphrase (+SSID). |
wireshark_editcap_deduplicate | destructive | Remove duplicate packets within a sliding window (default: 5 packets). |
wireshark_editcap_split | read | Split a capture into smaller files by packet count or interval. |
wireshark_editcap_time_shift | read | Adjust all packet timestamps by a positive or negative offset in seconds. |
wireshark_editcap_trim | read | Trim capture to a timestamp window. Times in editcap format. |
wireshark_extract_fields | read | [Tabular] Extract fields as TSV. fields: comma-separated (e.g. |
wireshark_extract_frames | read | [File] Extract specific frame ranges to a new pcap. Ranges: |
wireshark_filter_save | write | Filter packets from a pcap and save to a new file using a Wireshark display filter. |
wireshark_flow_graph | read | [Stats] Flow/sequence graph showing packet exchange. Types: |
wireshark_follow_stream | read | [Stream] Reassemble stream with pagination. protocol: tcp|udp|tls|http|http2. output_mode: ascii|hex|raw. |
wireshark_get_capabilities | read | Get Wireshark suite capabilities for this MCP server instance (available tools and versions). |
wireshark_get_file_info | read | Get capture file metadata (type, packet count, duration, size) via capinfos. |
wireshark_get_packet_bytes | read | [Bytes] Raw hex/ASCII dump of a single packet. |
wireshark_get_packet_context | read | [Context] Packets surrounding a specific frame (count before and after). |
wireshark_get_packet_details | read | [Detail] Full JSON for one packet. layers: comma-separated protocol filter (e.g. |
wireshark_get_packet_list | read | [Summary] Packet list (top pane). TSV: No/Time/Src/Dst/Proto/Len/Info. custom_columns: comma-separated fields. |
wireshark_list_interfaces | read | List available network interfaces for capture. |
wireshark_merge_pcaps | write | Merge multiple capture files into one. input_files: comma-separated paths. |
wireshark_open_file | read | [Entry Point] Open a pcap and get protocol-aware tool recommendations. Returns protocols and relevant tools. |
wireshark_quick_analysis | read | [Agent] One-call traffic overview: file info, protocols, top talkers, conversations, hostnames, anomalies. |
wireshark_read_packets | read | [DEPRECATED] JSON packet data. Use get_packet_list + get_packet_details instead. |
wireshark_search_packets | read | [Search] Find packets by content. |
wireshark_set_protocol_prefs | write | [Dissection] Protocol preference overrides. Prefs: |
wireshark_stats_conversations | read | [Conversations] Communication pairs and stats. type: |
wireshark_stats_endpoints | read | [Endpoints] List all endpoints and traffic stats. type: |
wireshark_stats_expert_info | read | [Expert Info] Automatic anomaly detection: retransmissions, errors, warnings, protocol issues. |
wireshark_stats_io_graph | read | [I/O Graph] Traffic volume by time bucket, optionally split by semicolon-separated display filters. |
wireshark_stats_protocol_hierarchy | read | [PHS] Protocol hierarchy statistics showing distribution of protocols in the capture. |
wireshark_stats_service_response_time | read | [SRT] Service response time statistics. protocol: |
wireshark_text2pcap_import | write | Convert ASCII or hex dump into a capture file using text2pcap. encapsulation: link-layer type (default: ether). |
Trust audit
CAUTIONgrade B · trust 84/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (4 observation(s))
- Network
- declared (8 observation(s))
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (18)
return success_response("No SYN-only packets found for beacon analysis.")return success_response("Insufficient connection data for beacon analysis.")output_parts = ["Beacon Detection Analysis"]
output_parts.append(f"\n{CRIT} {len(findings)} potential beacon(s) detected:\n")output_parts = ["Data Exfiltration Detection Analysis"]
wireshark_editcap_deduplicate
dns_tunnel_candidate.pcap
empty.pcap
multivalue_fields.pcap
plaintext_credentials.pcap
syn_scan_burst.pcap
.pre-commit-config.yaml
malicious_path = f"{tmp_dir}/../../../etc/passwd"Configure the client with the remote MCP URL `http://127.0.0.1:8080/mcp`.
随后在客户端中配置远程 MCP 地址 `http://127.0.0.1:8080/mcp`。
Add `http://127.0.0.1:8080/mcp` as a remote MCP URL in the client. Remote server configuration differs by client and is not emitted by the `config` command. Legacy SSE uses `--transport sse` and an en
在客户端中把 `http://127.0.0.1:8080/mcp` 添加为远程 MCP 地址。不同客户端的远程服务配置格式不同,`config` 命令不会生成这类配置。兼容旧式 SSE 时使用 `--transport sse`,端点以 `/sse` 结尾。
with TestClient(app, base_url="http://127.0.0.1") as client:
Gates applied: no_behavioural_pass.
b3e58482df43full audit observations/trust-audit/mcp-server/bx33661__wireshark-3.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-06 | b3e58482df43 | CAUTION | B | 84 | first audit |
Questions
What is the Wireshark MCP server?
Wireshark-MCP,Give your AI assistant a packet analyzer. Drop a .pcap file, ask questions in plain English — get answers backed by real tshark data.
What tools does Wireshark expose?
34 in total: 29 read-only, 4 that write, and 1 that can delete or overwrite (wireshark_editcap_deduplicate). Every one is listed on this page with its risk.
Is Wireshark safe to connect to an agent?
With care. The audit graded it B (84/100) and found 18 things worth knowing before you trust this server, listed below with the exact line each was found on. Separately from the audit: 1 of its tools can destroy data, so scope the token you give it to what you actually need.
What credentials does Wireshark need?
No credential environment variables were found in its source, so it appears to need none.
How does Wireshark run?
It speaks sse, stdio and streamable-http, so it runs as a local process your client starts. It is published on PyPI as wireshark-mcp.
How current is this page?
The grade is for one exact copy of the source (b3e58482df43), read on 2026-10-06. The repository is watched and re-audited when it changes.