Shark
Integrates Wireshark/tshark to provide network packet capture and analysis capabilities via a Model Context Protocol server.
About
Shark is a Model Context Protocol (MCP) server designed to empower AI assistants with advanced network security analysis, troubleshooting, and packet inspection capabilities. By integrating with Wireshark/tshark, it allows for seamless workflows such as starting background packet recordings, executing programs or requests, and then stopping the capture for detailed analysis of the network traffic.
Key Features
- Reusable configurations for consistent capture and analysis settings
- Flexible output formats including JSON, custom fields, and text
- Asynchronous background packet capture with filters and timeouts
- Analysis of existing PCAP files for detailed insights
- SSL/TLS decryption using SSL keylog files for HTTPS traffic
- 15 GitHub stars
Use Cases
- Debugging programs by verifying packet traffic during execution
- Enabling AI assistants to perform network security analysis and packet inspection
- Troubleshooting network connectivity and performance issues
Sponsored