Best Wireshark MCP Servers
Wireshark is a network protocol analyzer that allows users to capture and examine data traveling across a network. It's widely used for network troubleshooting, analysis, software development, and education.
Why this server?
Performs deep packet inspection and network forensics on PCAP files, including protocol analysis and credential extraction using TShark.
AlicenseAqualityFmaintenanceA comprehensive security testing MCP server providing 51 tools for penetration testing, network forensics, memory analysis, and vulnerability assessment. It enables automated security audits and technical investigations across web applications, cloud environments, and network captures.517123MITWhy this server?
Provides tools for analyzing network traffic and pcap files, including packet summarization, deep packet dissection, stream reassembly, and automated extraction of HTTP requests, DNS queries, and credentials.
AlicenseBqualityAmaintenanceAn MCP server that enables LLMs to analyze pcap files by providing tools for packet dissection, stream following, and data extraction via tshark. It supports protocol hierarchy analysis, credential scanning, and threat intelligence checks on captured network traffic.51201MITWhy this server?
Allows AI agents to perform network packet analysis using Wireshark's TShark tool, including PCAP analysis, live capture, TLS decryption, and telecom/SS7 signaling protocol analysis.
AlicenseAqualityDmaintenanceAn MCP server that exposes TShark as tools for AI-assisted network packet analysis, supporting PCAP analysis, live capture, TLS decryption, and telecom/SS7 signaling protocols.251MITWhy this server?
Provides packet capture, deep protocol analysis, stream reconstruction, expert info, TLS decryption, and traffic export using Wireshark/TShark.
AlicenseBqualityBmaintenanceA professional-grade network analysis MCP server that integrates Wireshark/TShark, Nmap, and threat intelligence to enable packet capture, network scanning, threat detection, and credential extraction through natural language.412MITWhy this server?
Provides tools for loading and analyzing PCAP/PCAPNG files using Wireshark's sharkd, enabling AI agents to inspect network packets, conversations, protocol statistics, and more.
AlicenseBqualityDmaintenanceEnables LLMs to load and analyze PCAP/PCAPNG files using Wireshark's sharkd interface, supporting packet inspection, traffic structure, conversations, and protocol statistics through natural language.3074MITWhy this server?
Provides tools for analyzing packet captures, including reading pcap files, applying display filters, following TCP/UDP streams, summarizing traffic, decoding protocols, and capturing live traffic via tshark.
AlicenseAqualityAmaintenanceEnables AI assistants to analyze, filter, and capture network traffic using Wireshark/tshark, allowing natural language interaction with packet captures.1456MITWhy this server?
Provides tools for capturing live network traffic and analyzing capture files using Wireshark's tshark, dumpcap, and capinfos, including packet summaries, protocol hierarchies, conversations, endpoints, expert info, IO stats, and stream reassembly.
AlicenseBqualityBmaintenanceEnables local LLM clients to capture and analyze network traffic using Wireshark's CLI tools, providing packet summaries, protocol hierarchies, conversations, endpoints, expert info, and stream reassembly without shell access.12MITWhy this server?
Enables packet capture and analysis through Wireshark/tshark integration, allowing the agent to start recording network traffic, analyze packet contents, apply filters, decrypt SSL/TLS traffic, and troubleshoot network issues
Why this server?
Suggested as a tool for analyzing network traffic to extract Eufy RoboVac device credentials.
AlicenseBqualityDmaintenanceA Model Context Protocol server for controlling Eufy RoboVac vacuum cleaners, enabling users to scan for devices, connect to them, and execute various cleaning commands through natural language.201,7831MIT