nerdexam
EC-Council

312-50V11 · Question #204

You want to analyze packets on your wireless network. Which program would you use?

The correct answer is A. Wireshark with Airpcap. Wireshark paired with AirPcap is the correct combination for capturing and analyzing 802.11 wireless traffic on Windows, because AirPcap provides the driver-level support needed for raw wireless packet capture.

Hacking Wireless Networks

Question

You want to analyze packets on your wireless network. Which program would you use?

Options

  • AWireshark with Airpcap
  • BAirsnort with Airpcap
  • CWireshark with Winpcap
  • DEthereal with Winpcap

How the community answered

(25 responses)
  • A
    92% (23)
  • C
    4% (1)
  • D
    4% (1)

Why each option

Wireshark paired with AirPcap is the correct combination for capturing and analyzing 802.11 wireless traffic on Windows, because AirPcap provides the driver-level support needed for raw wireless packet capture.

AWireshark with AirpcapCorrect

AirPcap is a specialized USB adapter and driver suite from Riverbed that enables Wireshark to capture raw 802.11 wireless frames including management and control frames on Windows. WinPcap and its successor Npcap are designed for wired Ethernet capture and cannot natively capture wireless 802.11 layer-2 frames. The AirPcap integration gives Wireshark full visibility into the wireless medium including encrypted traffic headers.

BAirsnort with Airpcap

AirSnort is a legacy WEP key-cracking tool, not a packet analysis application, and is not used for general wireless traffic inspection or protocol analysis.

CWireshark with Winpcap

WinPcap is a packet capture library designed for wired network interfaces and does not support raw 802.11 wireless frame capture, making it unsuitable for wireless packet analysis.

DEthereal with Winpcap

Ethereal is the discontinued predecessor to Wireshark that is no longer maintained or supported, and WinPcap does not provide wireless capture capability regardless of the front-end used.

Concept tested: Wireless packet capture tools and driver requirements

Source: https://www.wireshark.org/docs/wsug_html_chunked/ChCapWirelessOfficeEnv.html

Topics

#wireless sniffing#Wireshark#Airpcap#packet analysis

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice