Wireshark MCP

What it does

Connects AI assistants to professional-grade network analysis tools, allowing for real-time packet capture, PCAP file analysis, and active network scanning.

Tools

• capture_live_packets: Capture real-time traffic from a specified interface using BPF filters.
• analyze_pcap_file: Deep analysis of existing capture files with Wireshark display filters.
• nmap_port_scan: Perform various port scans (SYN, connect, UDP) to map network services.
• check_ip_threat_intel: Cross-reference IPs against URLhaus and AbuseIPDB for threat detection.
• follow_tcp_stream: Reconstruct TCP conversations into readable ASCII or hex formats.
• get_protocol_statistics: Generate protocol hierarchies and conversation stats.

Installation

Install via PyPI:

pip install wireshark-mcp-server

Claude Desktop Config:

{
  "mcpServers": {
    "wireshark": {
      "command": "wireshark-mcp-server",
      "env": {
        "ABUSEIPDB_API_KEY": "your_api_key_here"
      }
    }
  }
}

Supported hosts

• claude