wireshark_get_packet_list
Get a tabular list of network packets from a pcap file, with support for display filters and custom columns. Quickly scan traffic and identify packets of interest before drilling down.
Instructions
[Summary] Get a summary list of packets (like Wireshark's top pane). Use this first to scan traffic before drilling down.
Args: pcap_file: Path to capture file limit: Rows to return (default: 20) offset: Skip first N rows display_filter: Wireshark display filter (e.g. "tcp.port == 80") custom_columns: Comma-separated list of fields (e.g. "ip.src,http.host") If provided, replaces default columns.
Returns: Tabular list with columns: No, Time, Source, Destination, Protocol, Length, Info (Or your custom columns if specified)
Example: wireshark_get_packet_list("traffic.pcap", display_filter="http", custom_columns="ip.src,http.host,http.request.uri")
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| offset | No | ||
| pcap_file | Yes | ||
| custom_columns | No | ||
| display_filter | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |