MCP Servers
bx33661/Wireshark-MCP
Wireshark-MCP,Give your AI assistant a packet analyzer. Drop a .pcap file, ask questions in plain English — get answers backed by real tshark data.
Our verdict
We have not reviewed bx33661/Wireshark-MCP yet
No one at Enterprise DNA has checked this listing against its sources. The description comes from public listings gathered automatically. Any fact below shows where it came from and when it was last checked.
From the listing
About bx33661/Wireshark-MCP
Wireshark-MCP is a Python-based MCP server that lets AI assistants analyze network packet captures. It accepts .pcap files and answers plain-English questions by running tshark queries against the data.
Best for
Developers and security analysts who want to query packet captures through an AI assistant
Use cases
- Ask an AI to explain suspicious traffic patterns in a .pcap file
- Automate network forensics by feeding captures to an assistant
- Query packet details without manually writing tshark commands
Notes
131 stars on GitHub. Last updated 2026-05-22. Licensed MIT.
Pros
- Bridges natural language questions with real tshark analysis
- Lightweight Python server easy to integrate into MCP workflows
- Open source with 131 stars and active community interest
Cons
- Requires tshark installed separately on the host system
- Limited to .pcap file input; no live capture support
- Dependent on the AI assistant's ability to interpret network data
Key facts
What we have checked
- Days since the last commit
- 1
- GitHub forks
- 44
- GitHub stars
- 358
- Open issues
- 1
- Releases in the last 90 days
- 3
Each value shows when we last confirmed it and where it came from. Values we have not confirmed are left out, never guessed.
How to use
How to set it up
As the listing publishes it. We have not run this install.
Install
pip install wireshark-mcpTools exposed
wireshark_open_filewireshark_quick_analysiswireshark_casewireshark_analyze_protocolwireshark_indexwireshark_aggregate
Clients the listing names (not checked here)
Claude Desktop, Claude Code, Cursor, VS Code
Install
Add bx33661/Wireshark-MCP to your client
Our lab has not run this server yet. "Config checked" on a client means the recipe matches that client's documented config format; it does not mean we ran it.
Claude Code
Config checkedRun in your terminal (runs on your computer)
claude mcp add --transport stdio bx33661-wireshark-mcp -- uvx wireshark-mcp@0.6.5Claude Desktop
Config checkedAdd to claude_desktop_config.json (runs on your computer)
{
"mcpServers": {
"bx33661-wireshark-mcp": {
"command": "uvx",
"args": [
"wireshark-mcp@0.6.5"
]
}
}
}Cursor
Config checkedAdd to .cursor/mcp.json (runs on your computer)
{
"mcpServers": {
"bx33661-wireshark-mcp": {
"command": "uvx",
"args": [
"wireshark-mcp@0.6.5"
]
}
}
}VS Code
Config checkedAdd to .vscode/mcp.json (runs on your computer)
{
"servers": {
"bx33661-wireshark-mcp": {
"type": "stdio",
"command": "uvx",
"args": [
"wireshark-mcp@0.6.5"
]
}
}
}Codex
Config checkedAdd to ~/.codex/config.toml (runs on your computer)
[mcp_servers.bx33661-wireshark-mcp]
command = "uvx"
args = ["wireshark-mcp@0.6.5"]- ChatGPT: ChatGPT connects only to remote servers that need no API key.
Recipes come from the server's entry in the official MCP registry. Check the package name before you run it, and keep keys out of shared files.
Works with
What bx33661/Wireshark-MCP connects to
5 clients, each with how we know and when we checked.
| Works with | Type | How we know | Checked |
|---|---|---|---|
| Claude Code | Client | Install recipe matches the client's documented formatRuns locally, version 0.6.5Config checked | Claude Code docs |
| Claude Desktop | Client | Install recipe matches the client's documented formatRuns locally, version 0.6.5Config checked | Claude Desktop docs |
| Cursor | Client | Install recipe matches the client's documented formatRuns locally, version 0.6.5Config checked | Cursor docs |
| VS Code | Client | Install recipe matches the client's documented formatRuns locally, version 0.6.5Config checked | VS Code docs |
| Codex | Client | Install recipe matches the client's documented formatRuns locally, version 0.6.5Config checked | Codex docs |
Health and security
Is bx33661/Wireshark-MCP looked after, and what do its setup files show
Health score
56 out of 100
| Part | Points | What we saw |
|---|---|---|
| Recent activity | 30 of 30 | Last push 1 days ago |
| Releases | 15 of 15 | 3 releases in 90 days |
| Issue replies | Not counted | The latest check has no issue response reading (fewer than 3 measured issues, or issues switched off) |
| Maintainer | 0 of 15 | Owned by a single user |
| Official source | 0 of 20 | Community server |
Security check static checks
100 out of 100
- Note The lab has not recorded this server's tool list yet, so tool permissions were not checked.
Sources
Where this comes from
- GitHubRegistry
A source shows what was published when we checked it. It does not certify security, performance or a working installation. Read our method.
Changelog
What changed
No changes recorded yet. Releases, price changes and deprecations appear here, with their dates, once we track them for this record.
Pairs with
Other entries in the index that connect to this one. Click through to see the chain.
Get the free Developer’s Field Guide
A 27-page field guide to the AI coding workflow with Claude. Claude Code, MCP servers, the prompt patterns that work, and what to delegate. Free.
Enter your work email. We send it straight over, plus a few short notes worth knowing. Unsubscribe any time.