MCP Wireshark
未认领An MCP server that integrates Wireshark/tshark with AI tools and IDEs. Capture live traffic, parse .pcap files, apply display filters, follow streams, and export JSON - all via Claude Desktop, VS Code, or CLI. Cross‑platform, typed, tested, and pip‑installable.
安装
claude mcp add --transport stdio --scope user mcp-wireshark -- mcp-wireshark更多AI & ML服务器
浏览完整目录安全概况
已认领和已认证的服务器每周接受一次静态扫描，显示代码能触及的范围（外部服务、环境变量、shell 命令、代理配置目录）以及带有已知公告的依赖。认领此列表即可获得。 安全概况的工作原理
14 个工具中显示 14 个
文档中列出的工具 (14)
内容来自项目文档。服务器握手不会验证每个工具的说明或行为。
analyze_iec61850
Health triage for GOOSE/SV/MMS captures: per-source OK/WARN/FAIL with sqNum/stNum gaps, TTL violations, smpCnt discontinuities, lost sync, and MMS errors
check_installation
Verify tshark is installed and show version
decode_protocol
Extract protocol fields as a TSV table. Curated defaults for HTTP, DNS, TLS, GOOSE, MMS, SV, SIP, ICMP; arbitrary fields for any other protocol
display_filter
Apply a Wireshark display filter to a pcap
expert_info
tshark expert analysis: warnings, errors, and notes grouped by severity
export_json
Export packets from a pcap to a JSON file at a path you choose
follow_tcp
Reassemble a TCP stream and return its payload
follow_udp
Reassemble a UDP stream and return its payload
list_interfaces
List network interfaces available to capture from
live_capture
Capture live traffic from an interface (capped at 5 minutes / 10k packets)
protocol_stats
Aggregate -z reports (protocol hierarchy, conversations, endpoints, HTTP/DNS/SMB stats)
read_pcap
Read packets from a .pcap / .pcapng file (preview + total count)
stats_by_proto
Protocol hierarchy statistics
summarize_pcap
High-level summary: I/O stats, protocol hierarchy, top talkers