1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.
Dismiss Notice

Welcome To SNBForums

SNBForums is a community for anyone who wants to learn about or discuss the latest in wireless routers, network storage and the ins and outs of building and maintaining a small network.

If you'd like to post a question, simply register and have at it!

While you're at it, please check out SmallNetBuilder for product reviews and our famous Router Charts, Ranker and plenty more!

Good wireless adapter to capture 802.11n traffic?

Discussion in 'General Wireless Discussion' started by ndrp, Dec 12, 2016.

  1. ndrp

    ndrp Occasional Visitor

    Joined:
    Dec 16, 2014
    Messages:
    46
    What would be a good wireless adapter to capture 802.11n traffic? I need to capture traffic between 2.4 GHz 1x1 MIMO 802.11n client and 802.11ac access point. Windows 7 and 10 is preferred.

    I have tried Netgear's A6200 2x2 MIMO 802.11ac adapter but cannot get it working well. I use driver which comes in Acrylic WiFi Professional (https://www.acrylicwifi.com/en/wlan-software/wifi-analyzer-acrylic-professional/) for capturing but A6200 can capture random packets only. It doesn't matter if A6200 is 10 cm or 2 meters away from the client. About only 1 packet of 30 gets captured.

    I tested access point with 802.11b data rates (11 Mbps) but problem was same. I have AirPcap Ex adapter but it doesn't support 802.11n. AirPcap Ex captures all 802.11b traffic and the distance to client and access point doesn't really matter because 11 Mbps is very robust. I cannot figure out why Netgear's A6200 isn't working.

    I have laptop with Intel 4695AGN but it doesn't work either and I cannot set the channel (tested in Ubuntu). 'airmon-ng start wlan0 11' does not force mon0 to channel 11.

    AirPcap Nx costs about 800 dollars so I don't want to buy it.

    Edit:
    Acrylic NDIS driver needs 1.x version of Wireshark. Acrylic NDIS driver and Netgear A6200 seems not to be reporting right values in Wireshark. Acrylic remcommends A6200 adapter.
    1) Displayed capture time is "Jan 1, 1970 02:00:15.656918000" so you cant figure out when packets were captured.
    2) N data rates are reported to be 0,0 Mbps
    3) Acrylic support is a joke.
     
    Last edited: Dec 15, 2016
  2. Nullity

    Nullity Very Senior Member

    Joined:
    Jul 17, 2014
    Messages:
    1,640
    Location:
    Appalachia
    The airmon-ng (or other related projects') documentation should mention what hardware or drivers are best. Wikidevi should have a list of hardware & drivers.

    What are you trying to do?
     
  3. pege63

    pege63 Very Senior Member

    Joined:
    Jan 17, 2015
    Messages:
    954
    Location:
    Sweden, AngelIsland
    ASUS USB-AC55, ASUS USB-AC68, D-link DWA-192 all this USB adapters would work.
    Wath router do you have?
     
  4. ndrp

    ndrp Occasional Visitor

    Joined:
    Dec 16, 2014
    Messages:
    46
    I'm trying to capture data packects between 1x1 802.11n client and Cisco Aironet access points (802.11n and 802.11ac). Security is open.
     
    Last edited: Dec 13, 2016
  5. ndrp

    ndrp Occasional Visitor

    Joined:
    Dec 16, 2014
    Messages:
    46
    Do those work in Windows or Linux? Have you tested there adapters? I would be good is someone could confrim well working USB adapter.

    Access points are Cisco Aironet 802.11n and 802.11ac models.
     
    Last edited: Dec 13, 2016
  6. pege63

    pege63 Very Senior Member

    Joined:
    Jan 17, 2015
    Messages:
    954
    Location:
    Sweden, AngelIsland
    Yes i have them and they DO works in Windows 10, thats why i write them down.
     
  7. ndrp

    ndrp Occasional Visitor

    Joined:
    Dec 16, 2014
    Messages:
    46
    Do you use those adapters with Npcap https://github.com/nmap/npcap ?
     
  8. pege63

    pege63 Very Senior Member

    Joined:
    Jan 17, 2015
    Messages:
    954
    Location:
    Sweden, AngelIsland
    No
     
  9. ndrp

    ndrp Occasional Visitor

    Joined:
    Dec 16, 2014
    Messages:
    46
    Looks like all listed adapters are quite old.
     
  10. ndrp

    ndrp Occasional Visitor

    Joined:
    Dec 16, 2014
    Messages:
    46
    I'm not sure if I understook right. Have you used those adapters as regular USB WLAN adapters or have you used those with Wireshark and captured traffic not destined to the adapter itself?
     
    Last edited: Dec 14, 2016
  11. sfx2000

    sfx2000 Part of the Furniture

    Joined:
    Aug 11, 2011
    Messages:
    14,025
    Location:
    San Diego, CA
    Acrylic WiFi has a list of adapters that they've tested - I've had decent luck with Broadcom mini-PCIe cards that are built into some laptops...
     
  12. ndrp

    ndrp Occasional Visitor

    Joined:
    Dec 16, 2014
    Messages:
    46
    Netgear A6200 was rated five stars for packet capture but I did not had any luck with that.

    Omnipeek use Netgear A6210. I'll try it with Npcap when I get my A6210.
     
  13. pege63

    pege63 Very Senior Member

    Joined:
    Jan 17, 2015
    Messages:
    954
    Location:
    Sweden, AngelIsland
    Am using them in my network
     
  14. sfx2000

    sfx2000 Part of the Furniture

    Joined:
    Aug 11, 2011
    Messages:
    14,025
    Location:
    San Diego, CA
    make sure that the adapter used for capture is not associated with any AP when doing the capture... just a little tip...
     
  15. ndrp

    ndrp Occasional Visitor

    Joined:
    Dec 16, 2014
    Messages:
    46