SharkMCP

MCP server exposing Wireshark's sharkd interface for AI-driven network traffic analysis from PCAP files.

weirdmachine64 72
Claude CodeClaude DesktopGeneric
View source ↗

SharkMCP wraps Wireshark's sharkd programmatic interface as an MCP server, enabling language models to analyze PCAP and PCAPNG network capture files through natural language. It provides tools for session management, packet inspection, protocol hierarchy analysis, traffic statistics, conversation analysis, VoIP and media extraction, and custom tap queries. Each loaded capture file spawns a dedicated sharkd subprocess for isolated, concurrent processing.

Source

Repository: https://github.com/weirdmachine64/sharkmcp

Maintain SharkMCP?

Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.

[SharkMCP on getagentictools](https://getagentictools.com/mcp/weirdmachine64-sharkmcp?ref=badge)