Wireshark MCP Server

Example Use Cases

• 1

  Perform comprehensive network reconnaissance and device identification.

• 2

  Analyze network traffic profiles and detect security anomalies.

• 3

  Compare network captures and extract detailed protocol and endpoint information.

Description

This MCP server provides 20 tools, including 15 discrete and 5 composite workflow tools, to perform detailed network capture and analysis using tshark. It supports live capture and analysis of pcap files, device discovery, traffic profiling, security auditing, and capture comparison. The server is portable across Windows, Linux, and macOS, and includes an embedded OUI database for instant MAC vendor resolution without external lookups.