Claude와 같은 AI 시스템과 Wireshark 네트워크 분석 기능을 통합하기위한 모델 Context Protocol (MCP) 서버. 이 구현은 수동 복사 / 충격을 필요로하지 않고 Claude와 직접 통합을 제공합니다.

Wireshark MCP는 무엇입니까?

Wireshark MCP는 Wireshark를 통해 네트워크 패킷 데이터를 액세스 및 분석하기 위해 AI 조수를위한 표준화 된 방법을 제공합니다. 그것은 모델 Context 프로토콜을 구현하여 저수준 네트워크 데이터와 고도 AI 이해 사이의 간격을 브릿지.

서버는 다음과 같은 도구를 제공합니다:

1. Capturing 살아있는 네트워크 트래픽
2. 기존 Pcap 파일 분석
3. 프로토콜 별 정보를 추출
4. Summarizing 네트워크 흐름

빠른 시작

설치

MCP 서버 실행

Configuring Claude 데스크탑

Claude 데스크톱을 구성하려면 Wireshark MCP 서버를 사용하려면:

1. 오픈 클로드 데스크탑
2. 설정 이동 > 개발자 > 편집 Config
3. 다음 구성 추가:

/path/to/wireshark-mcp]를 저장소에 실제 경로로 바꾸십시오.

사용 가능한 도구

Wireshark MCP 서버는 다음과 같은 도구를 제공합니다.

• capture_live_traffic: tshark를 사용하여 라이브 네트워크 트래픽 캡처

Wireshark MCP (Model Context Protocol)

A Model Context Protocol (MCP) server for integrating Wireshark network analysis capabilities with AI systems like Claude. This implementation provides direct integration with Claude without requiring manual copy/paste of prompts.

What is Wireshark MCP?

Wireshark MCP provides a standardized way for AI assistants to access and analyze network packet data through Wireshark. It bridges the gap between low-level network data and high-level AI understanding by implementing the Model Context Protocol.

The server provides tools for:

1. Capturing live network traffic
2. Analyzing existing pcap files
3. Extracting protocol-specific information
4. Summarizing network flows

Quick Start

Installation

# Clone the repository 
git clone https://github.com/sarthaksiddha/Wireshark-mcp.git 
cd Wireshark-mcp

# Install dependencies
pip install -e .

Running the MCP Server

# Run with stdio transport (for Claude Desktop)
python mcp_server.py --stdio

# Run with SSE transport (for other MCP clients)
python mcp_server.py --host 127.0.0.1 --port 5000

Configuring Claude Desktop

To configure Claude Desktop to use the Wireshark MCP server:

1. Open Claude Desktop
2. Go to Settings > Developer > Edit Config
3. Add the following configuration:

{
  "mcpServers": {
    "wireshark": {
      "command": "python",
      "args": [
        "/path/to/wireshark-mcp/mcp_server.py",
        "--stdio"
      ]
    }
  }
}

Replace /path/to/wireshark-mcp with the actual path to your repository.

Available Tools

The Wireshark MCP server provides the following tools:

• capture_live_traffic: Capture live network traffic using tshark
• analyze_pcap: Analyze an existing pcap file
• get_protocol_list: Get a list of supported protocols

Example Usage in Claude

Once configured, you can use the Wireshark MCP server in Claude with queries like:

• “Capture 30 seconds of network traffic on my system and show me what’s happening”
• “Analyze my network.pcap file and tell me if there are any suspicious activities”
• “What protocols can I focus on when analyzing network traffic?”

Key Features

• Packet Summarization: Convert large pcap files into token-optimized summaries
• Protocol Intelligence: Enhanced context for common protocols (HTTP, DNS, TLS, SMTP, etc.)
• Flow Tracking: Group related packets into conversation flows
• Anomaly Highlighting: Emphasize unusual or suspicious patterns
• Query Templates: Pre-built prompts for common network analysis tasks