通过模型上下文协议（MCP）为AI代理进行数据包捕获和分析。

支持任何标准MCP主机：光标、Claude Desktop、Claude Code、VS Code / Copilot、Windsurf、custom agents及类似工具。无厂商锁定——主机只需启动：

版本0.2.2

GitHub Pages（可选）：设置 Settings → Pages → Source = GitHub Actions，然后 Pages 工作流程将 docs/ 发布为 HTML。

你得到了什么

• 通过MCP 工具进行实时捕捉和pcap/pcapng分析
• 通过MCP 提示词引导工作流程
• 启动 预冲段：如果缺少 TShark，进程会退出，这样你的主机会显示服务器离线/错误，而不是坏掉的工具列表
• setup / doctor 光源链，使新用户无需猜测即可配置路径

要求

• Python 3.10+
• TShark（PATH 或 TSHARK_PATH）
• Npcap（Windows）或libpcap（Unix）用于live捕获
• 目标网络捕获授权

快速开始（5分钟）

Wireshark MCP Server

Packet capture and analysis for AI agents via the Model Context Protocol (MCP).

Works with any stdio MCP host: Cursor, Claude Desktop, Claude Code, VS Code / Copilot, Windsurf, custom agents, and similar tools. No vendor lock-in — the host only needs to launch:

python -m wireshark_mcp

Version 0.2.2

GitHub Pages (optional): set Settings → Pages → Source = GitHub Actions, then the Pages workflow publishes docs/ as HTML.

What you get

• Live capture and pcap/pcapng analysis through MCP tools
• Guided workflows via MCP prompts
• Startup preflight: if TShark is missing, the process exits so your host shows the server offline/error instead of a broken tool list
• setup / doctor CLIs so a new user can configure paths without guessing

Requirements

• Python 3.10+
• TShark (PATH or TSHARK_PATH)
• Npcap (Windows) or libpcap (Unix) for live capture
• Authorization to capture on the target network

Quick start (5 minutes)

git clone https://github.com/A-G-U-P-T-A/wireshark-mcp
cd wireshark-mcp
python -m venv .venv

# Windows:  .venv\Scripts\activate
# Unix:     source .venv/bin/activate

python -m pip install -e .
python -m wireshark_mcp doctor
python -m wireshark_mcp setup

setup detects TShark (or asks for its path) and writes or prints a standard mcpServers JSON block. Point your host at that config, then reload / restart the host.

Windows Wireshark install:

winget install --id WiresharkFoundation.Wireshark -e

MCP config (any host)

{
  "mcpServers": {
    "wireshark": {
      "command": "/absolute/path/to/.venv/bin/python",
      "args": ["-m", "wireshark_mcp"],
      "env": {
        "TSHARK_PATH": "/absolute/path/to/tshark"
      }
    }
  }
}

Windows example paths:

• Python: C:\\Users\\YOU\\...\\wireshark-mcp\\.venv\\Scripts\\python.exe
• TShark: C:\\Program Files\\Wireshark\\tshark.exe

Ready-made template: examples/mcpServers.wireshark.json
Client-specific file locations: docs/Clients.md

CLI

Project layout

src/wireshark_mcp/     # MCP server package (tools, prompts, preflight)