# WireBuddy MCP server

> A collaborative Wireshark-style packet viewer that allows an AI agent to analyze traffic, write Lua dissectors, and create custom data visualization panels.

- Repository: https://github.com/dngames/wirebuddy
- Page: https://hostedmcp.org/servers/dngames/wirebuddy
- Transport: —
- Stars: 5
- License: MIT

## Tools (25)

- `viewer_url`
- `get_view_state`
- `open_capture`
- `capture_summary`
- `query_packets`
- `inspect_frame`
- `follow_stream`
- `expert_info`
- `io_graph`
- `export_packets`
- `write_findings`
- `export_objects`
- `check_display_filter`
- `set_display_filter`
- `goto_frame`
- `time_references`
- `packet_comments`
- `set_columns`
- `decode_as`
- `list_interfaces`
- `start_capture`
- `stop_capture`
- `open_in_wireshark`
- `extensions`
- `panel`

## FAQ

### How does the AI agent extend the viewer's capabilities?

The agent can write Lua dissectors for unknown protocols or create sandboxed panels to plot, play, or draw data from the capture.

### Can I use my existing Wireshark profiles and plugins?

Yes, everything is dissected by Wireshark's engine, supporting your plugins, preferences, and chosen profiles.

### Does WireBuddy support live packet captures?

Yes, the agent and the user can both start and stop live captures using tools like dumpcap.

### Can I decrypt TLS traffic in WireBuddy?

Yes, you can decrypt TLS traffic by providing an SSLKEYLOGFILE.