312-50V11 · Question #204
You want to analyze packets on your wireless network. Which program would you use?
The correct answer is A. Wireshark with Airpcap. Wireshark paired with AirPcap is the correct combination for capturing and analyzing 802.11 wireless traffic on Windows, because AirPcap provides the driver-level support needed for raw wireless packet capture.
Question
You want to analyze packets on your wireless network. Which program would you use?
Options
- AWireshark with Airpcap
- BAirsnort with Airpcap
- CWireshark with Winpcap
- DEthereal with Winpcap
How the community answered
(25 responses)- A92% (23)
- C4% (1)
- D4% (1)
Why each option
Wireshark paired with AirPcap is the correct combination for capturing and analyzing 802.11 wireless traffic on Windows, because AirPcap provides the driver-level support needed for raw wireless packet capture.
AirPcap is a specialized USB adapter and driver suite from Riverbed that enables Wireshark to capture raw 802.11 wireless frames including management and control frames on Windows. WinPcap and its successor Npcap are designed for wired Ethernet capture and cannot natively capture wireless 802.11 layer-2 frames. The AirPcap integration gives Wireshark full visibility into the wireless medium including encrypted traffic headers.
AirSnort is a legacy WEP key-cracking tool, not a packet analysis application, and is not used for general wireless traffic inspection or protocol analysis.
WinPcap is a packet capture library designed for wired network interfaces and does not support raw 802.11 wireless frame capture, making it unsuitable for wireless packet analysis.
Ethereal is the discontinued predecessor to Wireshark that is no longer maintained or supported, and WinPcap does not provide wireless capture capability regardless of the front-end used.
Concept tested: Wireless packet capture tools and driver requirements
Source: https://www.wireshark.org/docs/wsug_html_chunked/ChCapWirelessOfficeEnv.html
Topics
Community Discussion
No community discussion yet for this question.