Version 2.3.0
May 5, 2020
New Features
- New and massively improved packet parsing protocolengine - 2x faster and less requires less memory!
- MCS Index and Spatial Stream columns in Packets Table
- Splits large pcap files into sections of 500,000 packets to improve speed and handling of extremely large pcap files.
- Network list in Analyze tab now shows AP alias, not just MAC address
Bug Fixes
- Improved handling of unsupported pcap link types
- Drill-down no longer resets when filters or time window changes! (can you tell it was bugging us? 😆)
Version 2.2.4
June 06, 2019
New Features
- Export-To-Wireshark support for latest Wireshark versions (2.6.9 and 3.0.2).
- Beacon color is now dark purple and miscellaneous frames are lighter gray.
Bug Fixes
- Corrected problem where PhyType can be incorrectly parsed during captures.
- Fixed some parsing errors that were preventing the loading of some capture files.
Version 2.2.3
April 10, 2019
New Features
- Now shows the 802.1X Authentication 4-Way Handshake!
- Improved color palette makes it easier to follow RTS, CTS, QoS Data, Block ACK pattern.
- Beacons are now gray, to keep focus on actual network communications.
- Added support for TP-Link Archer T9UH v2 AC1900 Wi-Fi Adapter.
- Multicast and Broadcast
clients
are now aggregated together for a cleaner, more accurate client list.
Version 2.1.0
November 14, 2018
New Features
- Added ability to capture packets on multiple channels simultaneously with supported 802.11ac adapters
- Added experimental support for .pcap/.pcapng files captured from enterprise access points (Cisco, Meraki, Ruckus, Aruba, AeroHive)
- Added duration and channel columns to the Packets table (right click on the Packets table headers to show the new columns)
Bug Fixes
- Fixed a copy-to-clipboard issue in the Packets table.
- Fixed the calculation of guard intervals for 802.11ac packets with RadioTap headers
- Improved parsing of files containing some invalid packet types in addition to 802.11 packets
Special Thanks
- Dennis Bössing and Joel Michael for Aruba .pcap files
Supported 802.11ac Adapters
- Linksys WUSB6300
- Linksys WUSB6400M
- ASUS USB-AC68
- ALFA Network AWUS1900
- EnGenius EUB1200AC
- D-Link DWA-182 rev C1
- D-Link DWA-192
- TRENDnet TEW-805UB
- TP-LINK Archer T4U v2
- TP-LINK Archer T4UH v2
- Edimax EW-7822UAC
- Edimax EW-7833UAC
- ASUS USB-AC53 Nano
- Edimax EW-7822 ULC
- Edimax EW-7822 UTC
Version 2.0.1
July 03, 2018
- Fixed an issue with licensing that prevented new users from registering the software
Version 2.0
June 19, 2018
- Native 802.11ac packet capture! (with compatible adapter from this list)
- Open files up to 5 times faster
- Improved interface to diagnose WiFi issues faster
Version 1.12.3
May 22, 2018
- Now GDPR compliant :-) MetaGeek, along with every other tech company that you do business with has been busy updating privacy policies, data retention policies, and other processes related to the European Union's new General Data Protection Regulation. This update provides links to our privacy policy when we ask for personal information and anonymous usage data. As always we treat your personal information with respect, no matter what country you live in.
Version 1.12.2
May 8, 2018
- Eye P.A. is now able to capture 802.11 a/b/g/n packets using a WiFi adapter! This version of Eye P.A. supports Linksys AE2500 and Netgear A6200 adapters.
- Fixed the VendorVendor bug.
Version 1.11.1
August 1, 2017
- If you are near MetaCare expiration, Eye P.A checks the status of your license on startup to make sure that it doesn't miss any MetaCare extensions that you may have recently purchased.
- Improved the layout of the Packet Table columns.
- Increased the default width of the Right Side Bar to make it easier to get to the data you need
P.S. Happy International IPA Day on August 3rd! We hope you get to enjoy some delicious hoppy beverages.
Version 1.11.0
May 23, 2017
- Send us feedback: We love hearing from our customers about how they enjoy using our products and what enhancements would make their work easier. Use the new in app feedback feature and let us know what you think of Eye P.A.!
- Locate packets on timeline: Ever wonder where a packet appears on the over-time graph? On the packets table, select a row and then check out where it shows up on the graph!
- Active selection updates: The active selection window is pretty awesome and provides handy data. It now provides even more handy data by telling you exactly where the active selection starts, where it ends, and how much time occurs in-between. Awesome.
- Licensing fix: Some users used to be blocked from using Eye P.A. when they were disconnected from the Internet. Used to be…
Version 1.10.2
April 24, 2017
- Improved compatibility: Wireshark and Eye P.A. broke up for awhile, but they’re back together again! Eye P.A. can once again export packets to the latest version of Wireshark. Be sure to update Wireshark as well, as this update breaks compatibility with older versions.
- Easier license renewal: The MetaCare renewal experience wasn’t awesome, so we made it awesome (that means it’s easier and faster).
- Streamlined bug reporting: If Eye P.A. crashes (and it won’t, right?!), you can now report app crashes to let us know that it broke, which will allow us to better prioritize and fix issues.
- Improved auto updates: We didn’t like our old auto updater so we made a new one called “Magpie.” Also, it’s open source!
- Adds beta update integration: Want to test the latest releases? Eye P.A. now has a beta channel! Opt in via the Help menu, but be warned, beta versions are experimental, and might contain bugs!
- Update/Settings fix: Wasting time is lame, so Eye P.A. app settings are now retained when updating to the latest version.
- Desktop icon fix: Desktop icons are totally 2003, so we no longer add a desktop shortcut automatically upon installation of Eye P.A. But it’s still in your Start menu, and if you want to be trendy you can pin a shortcut to your taskbar for quick access (it’s what all the cool kids are doing...we hear).
Version 1.10.1
January 4, 2016
- Proxy password field is now masked
- Improved random deactivation issues
- Improved license entitlement behaviors
- Added "Deactivate" button to Activation window
Version 1.9
February 25, 2015
- Roaming clients easier to track around the Treepies
- AP Aliasing allows for friendly names (Cisco and Aruba info is automatically populated)
- Probe requests are now grouped under Broadcast
- A "Probe" client has been added to group probe responses
- Non-US 2.4GHz channels (12, 13, 14) are now available for built-in capture with AirPcap Nx
- "Unknown" SSIDs now have MAC Address displayed
- Additional information in details tables
- Various performance enhancements and bug fixes
Version 1.8.4
December 15, 2014
May 28, 2014
April 29, 2014
- Updated color scheme
- Packets tab columns are now persistent
- Improved performance with larger captures
- Fixed issue exporting to latest version of Wireshark
- Additional bug fixes
May 28, 2014
- ESSID and Radio Rings—organize packets by their ESSID or by Radio.
- Group by Radio or Group by ESSID functionality—toggle between Group by Radio and Group by ESSID
- Display Device Names for Cisco AP’s—see the Device Name in place of the Radio MAC for convenient identification
- Visualize tab-Analyze tab tab sync—When an SSID is selected in the Visualize tab, that network is now selected on the Analyze tab offering smoother workflow
- UI and UX polish
- Additional bug fixes
April 29, 2014
- Clicking on the Treepie name will now switch chart to the main view
- Disable Channel filter if only one Channel is captured
- Selecting the filter Auto-complete no longer requires an Enter keystroke
- Registration is more robust
- UI and UX polish
- Additional bug fixes
Version 1.8.0
March 12, 2014
January 20, 2014
March 12, 2014
- Filter clients by vendor—include or exclude clients by their vendor designation as recorded in current Organizationally Unique Identifier (OUI) file
- MAC Address Filter with autocomplete—enter in the beginning digits of a MAC address to include or exclude addresses for analysis
- Y-axis label on Histogram—get at-a-glance context for amounts and percentages for BYTES, PACKETS, and AIR TIME
- Channel selector for multi-channel captures—select only the packets from one channel to accurately analyze Air Time contention domain issues
- Fixed data rate columns in Active Selection to accurately display all data rates in capture
- UI polish
- Additional bug fixes
January 20, 2014
- Added Support for 802.11ac. See 802.11ac frames and data rates
- Added the ability to open .wcap files. It is no longer needed to change the extension to “.pcap” when using captures taken from a Mac
- Added a Data Rate bar chart in the Active Selection. See See the percentage of packets transmitted at each data rate
- Added visual improvements to the Histogram
- Added ability to recover failed captures
- Additional bug fixes
August 1, 2013
- Users can now see both filtered and unfiltered data in the Time Span slider. Get enhanced visibility into the full channel view as you drill into the packet capture file Current data will be displayed in a brighter color, filtered data will be semi-transparent
- Improved Air Time calculations
- Improved packet filtering
- Various bug fixes
- Transitioned to more a flexible and user-friendly licensing system
- Includes new software maintenance program called MetaCare
- The ANALYZE TAB allows you to select your network (or networks) to see channel observations and receive expert tips on improvements.
- Multiple AirPcap adapters are now supported, allowing users to capture several channels at the same time.
- When opening or capturing a file, a new Loading and Processing window allows for greater control.
- The FILE DETAILS section has been moved from VISUALIZE and PACKETS tabs to the new ANALYZE tab.
- Several crash bugs have been fixed.
- Copy content from Eye P.A. into your clipboard! ACTIVE SELECTION and FILE DETAILS will copy text within the tables. HISTOGRAM will copy the visual selection you’ve made as an image. After clicking the clipboard icon, paste the data into the application of your choice.
- Drag and drop new files into Eye P.A. to open a new file at any time
- When using filters, SSID’s will now autocomplete as you type into the filter bar.
- Eye P.A. will now remember any changes you make to the column order or visibility with both the ASSOCIATED DATA and PACKETS tables.
- Added New Sample files
- Added FILE NAME to the FILE DETAILS section
- Now your RECENT FILE list will remain persistent between opens or upgrade
- Miscellaneous bug fixes
- New Filter Bar – Filter packets for more flexibility in only see the data that you’re interested in, allowing for super quick “zoom into” problem areas. Also, select to display or hide invalid or malformed packets within the filter bar.
- Filter by: SSID, Vendor, MAC Address, Channel, Data Rate, RSSI Value
- New Packet Viewer – Integrated into the PACKET tab is our new Packet Viewer, eliminating the need to go back and forth between Wireshark and Eye P.A. Do all your packet analysis in one application. Right click on the column header to select what standard packet information you’d like to show. New Workflow Design – LEARN, START, VISUALIZE, PACKETS navigation condenses and groups together the steps of Packet Analysis for better customer use.
- Other Changes
- Persistent treepie memory now maintains the same drill-down when you move the Adjustable Time Graph or apply filters.
- Adjustable Time Graph display updates to match any changes made to filters or treepie drill-downs.
- Added a “Would you like to save this capture before exiting Chanalyzer?” prompt upon exit of the application. This can be disabled both from within the prompt and from the FILE menu.
- Collapsible Sections within new Workflow screens.
- The title TIME has been changed to AIR TIME.
- Eye P.A. now has the ability to capture live wireless data packets with a Riverbed AirPcap USB device. Simply connect an AirPcap to your computer and initiate the capture feature from within Eye P.A. in the FILE menu to create a .pcap file that opens immediately after completing the capture for quick analysis.
- To increase performance, we’ve visually condensed sections that are 1% or less of the displayed treepie view into a MISCELLANEOUS treepie slice. Packet information is still available in the Data Table.
- Added a link for SUPPORTED DEVICES in the HELP menu to help customers understand which devices are currently supported with the Live Capture feature.
- Fixed a minor parsing issue with ACK packets.
- MetaGeek designed and implemented a completely new parsing engine for .pcap files – now most files open 30% faster.
- Using new color swatches, individual frame types can be filtered out with our SUB-FRAME PACKET FILTERS option under VIEW menu more easily – filter menu colors now match the associated section of the treepie.
- Eye P.A. supports the new Wireshark file type – .pcapng.
- Eye P.A. also has experimental support for Microsoft® Network Monitor .cap and Comview® .ncf files. Currently, export to Wireshark will not work for these file types. Regardless, we wanted to give you the ability to do quick visual troubleshooting in Eye P.A. with those file types.
- 15-day trial
- Other Changes
- Fixes issue opening big endian file format.
- Displays both SSID and MAC address in the ACTIVE SELECTION window.
- Fixed sorting order for ASSOCIATED DATA TABLE on time frame adjustments.
- Fixed parsing for Hidden_xx:xx:xx SSID.
- Fixed (find name in app) .csv export where data may be displayed incorrectly.
- Renamed APPLICATION INFORMATION to LEGEND.