Sniffing Wirelessly in Windows

Even if you have a wireless NIC that supports monitor mode, most Windows based wireless NIC drivers won’t allow you to change into this mode (WinPcap doesn’t support this either). You’ll need a little extra hardware to get the job done.

Configuring AirPcap

AirPcap (from CACE Technologies, now a part of Riverbed, http://www.cacetech.com/) is designed to overcome the limitations that Windows places on wireless packet analysis. AirPcap is a small USB device that resembles a flash drive, as shown in Figure 11-5. It is designed to capture wireless traffic.

AirPcap uses the WinPcap driver discussed in Chapter 3 and a special client configuration utility.

Figure 11-5. The AirPcap device is very compact, making it easy to tote ...

Get Practical Packet Analysis, 2nd Edition now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.