Eye P.A., Tonic, and inSSIDer with MetaGeek Plus can obtain packet captures from several sources. The best source is a 3x3 802.11ac adapter from the list below (TP-LINK Archer T9-UH recommended). While there are a number of 2x2 802.11ac adapters supported, they will not capture packets sent using three spatial streams.
Note: If you've purchased the Eye P.A. Essential bundle, then you already have the Edimax EW-7833UAC listed below and can take start taking advantage of a MetaGeek Plus subscription!
Windows 802.11ac adapters (Eye P.A., Tonic, inSSIDer)
(These adapters support simultaneous packet capture from multiple adapters in Eye P.A.)
Three Spatial Streams (3x3):
- Edimax EW-7833UAC (recommended)
- TP-LINK Archer T9-UH v2 (recommended)
- ASUS USB-AC68
- ALFA Network AWUS1900
- D-Link DWA-192
Two Spatial Streams (2x2):
- Edimax EW-7822 UAC
- Comfast CF912-AC (also known as the Ekahau SA-1 Survey Adapter)
- Linksys WUSB6400M
- ASUS USB-AC53 Nano
- D-Link DWA-182 rev C1
- Edimax EW-7822 ULC
- Edimax EW-7822 UTC
- EnGenius EUB1200AC
- Proxim ORiNOCO 9100
- TRENDnet TEW-805UB
- TP-LINK Archer T4U v2
- TP-LINK Archer T4UH v2
Here are the helpful benefits of MetaGeek Plus that start happening when you plug in one of the above adapters and open inSSIDer:
 |
 |
|
|
MetaGeek Plus benefits |
out-of-the-box |
when you plug in your adapter |
|
Establish benchmarks and track network data over time with Network Snapshots |
✓ |
✓ |
|
See visual indicator when new APs enter your environment |
✓ |
✓ |
|
See Real-Time Packet Analytics in inSSIDer |
✓ |
|
|
See signal strength and utilization from the client device perspective |
✓ |
|
|
Signal strength over time for each connected client |
✓ |
|
|
Get real-time MCS Index, spatial streams, and channel width |
✓ |
|
|
Locate clients and see utilization by client |
✓ |
|
|
View utilization by SSID |
✓ |
|
|
Track client events (association, roaming, beam forming, spectrum report) |
✓ |
Windows 802.11n adapter (Eye P.A. only)
This adapter is compatible but not recommended because it's 802.11n only.
- RiverBed AirPcap Nx
The AirPcap Nx is a USB wireless packet capture device (802.11a/b/g/n 2x2 MIMO) that overcomes the typical wireless packet capture limitations of Windows. Support for this device is built into Eye P.A.
** The AirPcap Nx was discontinued by Riverbed in late 2017, but it will continue to be supported in Eye P.A. as a packet capture device.
macOS Wireless Diagnostics Tool
The Wireless Diagnostics Tool in macOS makes wireless packet capture very easy. When you are done, you can move the WCAP file into your Windows virtual machine by dragging and dropping the file.
For a step by step guide, see: Wireless Packet Capture with macOS
You can also use Dropbox or BitTorrent Sync to move the file to a Windows machine for analysis.
A video demonstration of packet capture in macOS is available here.
Linux: Normal WiFi Adapter in Monitor Mode
Common Linux tools like airmon-ng and tcpdump can be used to generate PCAP files. Just be sure that your wireless adapter can be put into monitor mode.
Network: Enterprise-Grade AP
Some enterprise-grade APs can generate PCAP files. This can be useful for getting the APs perspective.
__________________________________________________________________________________________________________
^As an Amazon Associate, MetaGeek earns from qualifying purchases using the links above