You want to analyze packets on your wireless network. Which program would you use?

Question

Options

• AWireshark with Airpcap
• BAirsnort with Airpcap
• CWireshark with Winpcap
• DEthereal with Winpcap

• A
  93% (27)
• B
  3% (1)
• C
  3% (1)

Explanation

Explanation

Wireshark with AirPcap (Option A) is the correct combination because Wireshark is the industry-standard packet analyzer, and AirPcap is the specialized packet capture driver designed specifically for wireless (802.11) network traffic on Windows systems, enabling capture of raw 802.11 frames including management and control packets.

• Option B is wrong because AirSnort is a wireless encryption cracking tool (used to crack WEP keys), not a packet analyzer - it has an entirely different purpose despite working with wireless networks.
• Option C is wrong because WinPcap is designed for wired (Ethernet) network traffic capture on Windows; it cannot capture raw wireless 802.11 frames the way AirPcap can.
• Option D is wrong on two counts: Ethereal is simply the old name for Wireshark (rebranded in 2006), and WinPcap doesn't support wireless packet capture anyway.

Memory Tip: Think "Air = Air" - if you're capturing wireless (air) traffic, you need AirPcap. Wireshark is always your go-to analyzer, so just remember to match the medium (air/wireless) with the capture driver (AirPcap).

No community discussion yet for this question.