wireshark_open_file
Opens a pcap file, analyzes protocols, and recommends relevant analysis tools for network traffic investigation.
Instructions
[Entry Point] Open a pcap file and recommend the most relevant analysis tools.
This is the recommended FIRST tool to call. It analyzes the capture file, detects what protocols are present, and points the assistant at the most relevant tools for this specific capture.
All contextual tools remain available for the full session. This opener provides capture-wide context and recommendations without mutating the MCP tool surface mid-session.
Args: pcap_file: Path to the capture file (.pcap, .pcapng, etc.)
Returns: File overview, protocol summary, and recommended next tools.
Example: wireshark_open_file("/path/to/capture.pcap")
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| pcap_file | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |