Skip to main content
Glama
bx33661

Wireshark MCP

by bx33661
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Local

Related Servers

Alternatives to Wireshark MCP

No user-submitted related servers found.

    Related Servers

    • NetForensicMCP

      kylecui
      A
      license
      Not graded
      quality
      F
      maintenance
      An MCP server for offline network forensic analysis and threat intelligence, enabling LLMs to analyze PCAP files, extract streams, detect threats, and identify credentials using tshark.
      6
      MIT

    • mcpcap

      sentry-official
      A
      license
      A
      quality
      D
      maintenance
      A modular MCP server for analyzing PCAP files using protocol-specific analysis tools, enabling LLMs to read and analyze network packet captures from local paths or remote URLs.
      4
      MIT

    • TShark2MCP

      niusulong
      A
      license
      Not graded
      quality
      B
      maintenance
      An MCP server that enables AI-assisted network packet analysis using Wireshark's TShark tool. It provides tools for pcap file overview, session extraction, protocol filtering, and statistical analysis through a standardized interface.
      1
      MIT

    • AutoSOC Agent

      greenoceanbird
      F
      license
      Not graded
      quality
      D
      maintenance
      An automated security operations center MCP server that uses LLMs and network analysis tools like Tshark to detect threats in traffic data. It enables users to automatically ingest PCAP files, query specific packets, and generate intelligent security analysis reports.
      -

    • TShark MCP

      fairyming
      F
      license
      Not graded
      quality
      D
      maintenance
      An MCP server for analyzing network traffic and pcap files using tshark. It enables users to list TCP streams, extract application-layer payloads, and perform packet analysis with BPF filters.
      2
      -

    • PacketMaster

      Jctechbr
      F
      license
      B
      quality
      C
      maintenance
      MCP server for network-troubleshooting PCAP analysis via tshark, enabling users to analyze PCAP files, detect anomalies, and troubleshoot network issues.
      22
      -
    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    B3/5.0

    Scored across 52 tools

    Disambiguation3/5

    Many tools overlap heavily: wireshark_aggregate ('primary statistics') competes with stats_protocol_hierarchy, stats_endpoints, stats_conversations, analyze_protocol, and stats_io_graph, and the seven detect_* security tools have fuzzy boundaries. The bracketed category tags ([Stats], [Security], [Forensics]) and open_file's recommendations help, but an agent can still easily misselect among the many statistics and anomaly tools.

    Naming Consistency5/5

    Every tool uses the wireshark_ prefix with snake_case and a predictable verb/noun or category_noun structure (wireshark_capture, wireshark_stats_*, wireshark_detect_*, wireshark_extract_*). Deviations like the editcap_ subset are still consistent sub-groupings, and no mixed conventions appear.

    Tool Count2/5

    52 tools far exceeds the 25+ threshold and lands in heavy territory, with obvious cruft like the deprecated wireshark_read_packets and the low-value wireshark_get_capabilities. The domain is genuinely broad, which partially justifies the size, but the surface is over-expanded and could be consolidated significantly.

    Completeness5/5

    Coverage is remarkably thorough: capture, filter, edit/split/trim, merge, stats, stream reassembly, decryption (TLS/WPA), export, forensics, and YARA scanning are all present, leaving essentially no dead ends for the pcap-analysis domain.

    Maintenance

    ActivityMaintained
    ResponsivenessUnresponsive

    Resources