Eye P.A., MetaGeek App (formerly Chanalyzer 6), and inSSIDer with MetaGeek Plus can obtain packet captures from several sources. The best source is a 3x3 802.11ac adapter from the list below (TP-LINK Archer T9-UH recommended). While there are a number of 2x2 802.11ac adapters supported, they will not capture packets sent using three spatial streams.
Windows 802.11ac adapters (Eye P.A., MetaGeek App, inSSIDer)
(These adapters support simultaneous packet capture from multiple adapters in Eye P.A.)
Three Spatial Streams (3x3):
- Edimax EW-7833UAC (recommended)
- TP-LINK Archer T9-UH v2 (recommended)
- ASUS USB-AC68
- ALFA Network AWUS1900
- D-Link DWA-192
Two Spatial Streams (2x2):
- Edimax EW-7822 UAC
- Comfast CF912-AC (also known as the Ekahau SA-1 Survey Adapter)
- Linksys WUSB6400M
- ASUS USB-AC53 Nano
- D-Link DWA-182 rev C1
- Edimax EW-7822 ULC
- Edimax EW-7822 UTC
- EnGenius EUB1200AC
- Proxim ORiNOCO 9100
- TRENDnet TEW-805UB
- TP-LINK Archer T4U v2
- TP-LINK Archer T4UH v2
Windows 802.11ax adapters (MetaGeek App only)
Windows 802.11n adapter (Eye P.A. only)
This adapter is compatible but not recommended because it's 802.11n only.
- RiverBed AirPcap Nx
The AirPcap Nx is a USB wireless packet capture device (802.11a/b/g/n 2x2 MIMO) that overcomes the typical wireless packet capture limitations of Windows. Support for this device is built into Eye P.A.
** The AirPcap Nx was discontinued by Riverbed in late 2017, but it will continue to be supported in Eye P.A. as a packet capture device.
macOS Wireless Diagnostics Tool
The Wireless Diagnostics Tool in macOS makes wireless packet capture very easy. When you are done, you can move the WCAP file into your Windows virtual machine by dragging and dropping the file.
For a step by step guide, see: Wireless Packet Capture with macOS
You can also use Dropbox or BitTorrent Sync to move the file to a Windows machine for analysis.
A video demonstration of packet capture in macOS is available here.
Linux: Normal WiFi Adapter in Monitor Mode
Common Linux tools like airmon-ng and tcpdump can be used to generate PCAP files. Just be sure that your wireless adapter can be put into monitor mode.
Network: Enterprise-Grade AP
Some enterprise-grade APs can generate PCAP files. This can be useful for getting the APs perspective.
________________________________________________________________________________________
^As an Amazon Associate, MetaGeek earns from qualifying purchases using the links above