Schema | Tshark MCP Server

Tshark MCP Server

Describes the environment variables required to run the server.

Name	Required	Description	Default
No arguments

Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.

This server publishes no instructions, or was last inspected before Glama recorded them.

Features and capabilities supported by this server

Protocol revision2025-11-25

Capability	Details
`tools`	{}

Functions exposed to the LLM to take actions

Name	Description
analyze_pcap_attacksA	Analyze a pcap file for potential security threats and attacks. Returns suspicious IPs, port scans, DDoS indicators, DNS anomalies, HTTP attacks, and connection patterns.
query_pcapC	Run a custom tshark query on a pcap file with optional display filters and field extraction. Use Wireshark display filter syntax.
get_pcap_statsA	Get general statistics about a pcap file including packet counts, protocols, and conversations.
investigate_dns_tunnelingA	Perform detailed DNS tunneling investigation. Identifies attack characteristics, starting packet number, source IP, OS fingerprinting via TTL, and entropy analysis. Perfect for forensic investigations.

Interactive templates invoked by user choice

Name	Description
No prompts

Contextual data attached and managed by the client

Name	Description
No resources

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/cerby0n/tshark-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server