Sniffing Wirelessly in Windows

Even if you have a wireless NIC that supports monitor mode, most Windows-based wireless NIC drivers won't allow you to change into this mode. You'll need a little extra hardware to get the job done.

Configuring AirPcap

AirPcap (from CACE Technologies, http://www.cacetech.com) is designed to overcome the limitations that Windows places on wireless packet analysis. AirPcap is a small USB device (Figure 10-3) resembling a Flash drive that is designed to capture wireless traffic. AirPcap uses the WinPcap driver discussed in Chapter 3 and a special client configuration utility.

The AirPcap device is very compact, making it easy to tote along with a laptop

Figure 10-3. The AirPcap device is very compact, ...

Get Practical Packet Analysis now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.