Best Wireshark MCP Servers
Wireshark is a network protocol analyzer that allows users to capture and examine data traveling across a network. It's widely used for network troubleshooting, analysis, software development, and education.
Why this server?
Performs deep packet inspection and network forensics on PCAP files, including protocol analysis and credential extraction using TShark.
AlicenseAqualityFmaintenanceA comprehensive security testing MCP server providing 51 tools for penetration testing, network forensics, memory analysis, and vulnerability assessment. It enables automated security audits and technical investigations across web applications, cloud environments, and network captures.517123MITWhy this server?
Provides network packet analysis capabilities via Wireshark/tshark, including live packet capture, PCAP analysis, protocol statistics, stream reconstruction, file extraction, credential extraction, and HTTP object export.
AlicenseAqualityFmaintenanceA Model Context Protocol server that enables AI assistants to perform network packet analysis, capture, and security operations on a remote machine via Wireshark/tshark.101MITWhy this server?
Provides tools for loading and analyzing PCAP/PCAPNG files using Wireshark's sharkd, enabling AI agents to inspect network packets, conversations, protocol statistics, and more.
AlicenseBqualityDmaintenanceEnables LLMs to load and analyze PCAP/PCAPNG files using Wireshark's sharkd interface, supporting packet inspection, traffic structure, conversations, and protocol statistics through natural language.3074MITWhy this server?
Allows AI agents to perform network packet analysis using Wireshark's TShark tool, including PCAP analysis, live capture, TLS decryption, and telecom/SS7 signaling protocol analysis.
AlicenseAqualityDmaintenanceAn MCP server that exposes TShark as tools for AI-assisted network packet analysis, supporting PCAP analysis, live capture, TLS decryption, and telecom/SS7 signaling protocols.251MITWhy this server?
Provides tools for analyzing packet captures, including reading pcap files, applying display filters, following TCP/UDP streams, summarizing traffic, decoding protocols, and capturing live traffic via tshark.
AlicenseAqualityAmaintenanceEnables AI assistants to analyze, filter, and capture network traffic using Wireshark/tshark, allowing natural language interaction with packet captures.1456MITWhy this server?
Allows streaming packet captures from EVE-NG PRO nodes to a local Wireshark for live analysis, without requiring direct SSH access to the EVE-NG host.
AlicenseAqualityBmaintenanceMCP server for controlling EVE-NG network emulator instances via REST API, enabling lab/node/network management, topology editing, and device operations through natural language.36MITWhy this server?
Provides packet capture, deep protocol analysis, stream reconstruction, expert info, TLS decryption, and traffic export using Wireshark/TShark.
AlicenseBqualityBmaintenanceA professional-grade network analysis MCP server that integrates Wireshark/TShark, Nmap, and threat intelligence to enable packet capture, network scanning, threat detection, and credential extraction through natural language.412MITWhy this server?
Enables packet capture and analysis through Wireshark/tshark integration, allowing the agent to start recording network traffic, analyze packet contents, apply filters, decrypt SSL/TLS traffic, and troubleshoot network issues
Why this server?
Suggested as a tool for analyzing network traffic to extract Eufy RoboVac device credentials.
AlicenseBqualityDmaintenanceA Model Context Protocol server for controlling Eufy RoboVac vacuum cleaners, enabling users to scan for devices, connect to them, and execute various cleaning commands through natural language.201,7831MIT