PCAP files for use with Eye P.A. can be obtained from several sources.
Windows: 802.11ac adapters
Here is the full list of compatible adapters for 802.11a/b/g/n/ac packet capture built into Eye P.A.:
- Linksys WUSB6300 (recommended)
- ASUS USB-AC68
- ALFA Network AWUS1900
- EnGenius EUB1200AC
- D-Link DWA-182 rev C1
- D-Link DWA-192
- TRENDnet TEW-805UB
- TP-LINK Archer T4U v2
- TP-LINK Archer T4UH v2
- Edimax EW-7822UAC
- Edimax EW-7833UAC
Windows: 802.11n adapters
- Linksys AE2500
- Linksys AE1200
- Netgear A6200 WiFi Adapters
- RiverBed AirPcap Nx
The Linksys AE2500 WiFi adapter is our recommended packet capture device. It captures 802.11 a/b/g/n packets across all 2.4 GHz and 5 GHz channels.
The Linksys AE1200 and Netgear A6200 adapters are supported, but do not capture DFS channels in the 5 GHz band (channels 52-144).
The AirPcap Nx is a USB wireless packet capture device (802.11a/b/g/n 2x2 MIMO) that overcomes the typical wireless packet capture limitations of Windows. Support for this device is built into Eye P.A.
The AirPcap Nx was discontinued by Riverbed in late 2017, but it will continue to be supported in Eye P.A. as a packet capture device.
macOS: Wireless Diagnostics Tool
The Wireless Diagnostics Tool in macOS makes wireless packet capture very easy. When you are done, you can move the WCAP file into your Windows virtual machine by dragging and dropping the file.
You can also use Dropbox or BitTorrent Sync to move the file to a Windows machine for analysis.
Linux: Normal WiFi Adapter in Monitor Mode
Common Linux tools like airmon-ng and tcpdump can be used to generate PCAP files. Just be sure that your wireless adapter can be put into monitor mode.
Network: Enterprise-Grade AP
Some enterprise-grade APs can generate PCAP files. This can be useful for getting the APs perspective.