Eye P.A. can obtain packet captures from several sources. The best source is a 3x3 802.11ac adapter from the list below (TP-LINK Archer T9-UH recommended). While there are a number of 2x2 802.11ac adapters supported, they will not capture packets sent using three spatial streams.
Windows: 802.11ac adapters
(These adapters support simultaneous packet capture from multiple adapters)
Three Spatial Streams (3x3):
- TP-LINK Archer T9-UH v2 (recommended)
- ASUS USB-AC68
- ALFA Network AWUS1900
- D-Link DWA-192
- Edimax EW-7833UAC
Two Spatial Streams (2x2):
- Edimax EW-7822 UAC (recommended)
- Linksys WUSB6300 (recommended)
- Linksys WUSB6400M
- ASUS USB-AC53 Nano
- D-Link DWA-182 rev C1
- Edimax EW-7822 ULC
- Edimax EW-7822 UTC
- EnGenius EUB1200AC
- Proxim ORiNOCO 9100
- TRENDnet TEW-805UB
- TP-LINK Archer T4U v2
- TP-LINK Archer T4UH v2
Windows: 802.11n adapters (Not recommended)
These adapters are NOT capable of capture from multiple adapters simultaneously.
- Linksys AE2500
- Linksys AE1200
- Netgear A6200 WiFi Adapters
- RiverBed AirPcap Nx **
(The Airpcap Nx can capture simultaneously with othe AirPcap Nx)
The AirPcap Nx is a USB wireless packet capture device (802.11a/b/g/n 2x2 MIMO) that overcomes the typical wireless packet capture limitations of Windows. Support for this device is built into Eye P.A.
The AirPcap Nx was discontinued by Riverbed in late 2017, but it will continue to be supported in Eye P.A. as a packet capture device.
macOS: Wireless Diagnostics Tool
The Wireless Diagnostics Tool in macOS makes wireless packet capture very easy. When you are done, you can move the WCAP file into your Windows virtual machine by dragging and dropping the file.
You can also use Dropbox or BitTorrent Sync to move the file to a Windows machine for analysis.
Linux: Normal WiFi Adapter in Monitor Mode
Common Linux tools like airmon-ng and tcpdump can be used to generate PCAP files. Just be sure that your wireless adapter can be put into monitor mode.
Network: Enterprise-Grade AP
Some enterprise-grade APs can generate PCAP files. This can be useful for getting the APs perspective.