Sniffing Wirelessly in Windows

Even if you have a wireless NIC that supports monitor mode, most Windows-based wireless NIC drivers won't allow you to change into this mode. You'll need a little extra hardware to get the job done.

Configuring AirPcap

AirPcap (from CACE Technologies, http://www.cacetech.com) is designed to overcome the limitations that Windows places on wireless packet analysis. AirPcap is a small USB device (Figure 10-3) resembling a Flash drive that is designed to capture wireless traffic. AirPcap uses the WinPcap driver discussed in Chapter 3 and a special client configuration utility.

The AirPcap device is very compact, making it easy to tote along with a laptop

Figure 10-3. The AirPcap device is very compact, ...

Get Practical Packet Analysis now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.