312-50V10 · Question #204
You want to analyze packets on your wireless network. Which program would you use?
The correct answer is A. Wireshark with Airpcap. Wireshark requires Airpcap (not Winpcap) to capture raw 802.11 wireless frames on Windows, as Airpcap provides the hardware-level driver needed for wireless promiscuous-mode capture.
Question
You want to analyze packets on your wireless network. Which program would you use?
Options
- AWireshark with Airpcap
- BAirsnort with Airpcap
- CWireshark with Winpcap
- DEthereal with Winpcap
How the community answered
(28 responses)- A89% (25)
- B7% (2)
- C4% (1)
Why each option
Wireshark requires Airpcap (not Winpcap) to capture raw 802.11 wireless frames on Windows, as Airpcap provides the hardware-level driver needed for wireless promiscuous-mode capture.
Wireshark is the industry-standard packet analyzer, and Airpcap is the specialized Windows adapter driver that enables it to capture raw 802.11 wireless frames in promiscuous mode. Without Airpcap, Wireshark on Windows cannot access the wireless medium at the frame level. Together they provide full wireless network packet analysis capability.
Airsnort is a WEP key recovery and cracking tool, not a general-purpose packet analyzer for network traffic analysis.
Winpcap is a Windows packet capture library designed for wired Ethernet interfaces and does not support raw 802.11 wireless frame capture.
Ethereal was the former name of Wireshark before its 2006 rebrand, and Winpcap cannot capture wireless 802.11 frames regardless of the frontend used.
Concept tested: Wireless packet capture tools and adapter drivers
Source: https://wiki.wireshark.org/CaptureSetup/WLAN
Topics
Community Discussion
No community discussion yet for this question.