This is my first question so please be nice. I want to set up my first package capture kit. I need to capture packages on a 802.11n network. This is what I'm thinking on getting:
Here are my questions:
Thanks, Ricco asked 03 Sep '13, 21:27  ricco1982 |
One Answer:
Yes, especially if you run Linux on your Laptop. There are quite some USB adapters that support monitor mode (required to capture wifi traffic of other machines). See here:
Regarding the Hub. You won't need that for WLAN capturing, unless it is a USB hub to extend the number of USB ports (more wlan adapters to capture from). Regards answered 03 Sep '13, 23:54  Kurt Knochner ♦ edited 03 Sep '13, 23:59 |
Regarding to the Hub: I was thinking that I would a hub if I need to take a multichannel capture? Thoughts?? so at least 3 wireless N USB adapters + HUB + Linux + wireshark = 802.11n package capture??
Aprreciate the clear answer.
O.K. if you talk about a USB hub (not a network hub), then I agree. You would need several USB adapters to capture on different channels in parallel.
Kurt,
you have been very helpful. I really appreciate all the help here. One last question and I promise I'll leave you alone.
Should I go safe and buy a "dual-band" Wireless-N USB Adapter or only a 2.4 or a 5 GHZ? Any recommendations or preference?
Thanks,
I hope you will not leave us alone. This site lives from contributions of people interested in Wireshark and network troubleshooting. So, please stay around ;-)
Well, that's hard to say and in general it is not that easy to find a USB adapter with really good Linux support. I'm not going to give an advice regarding a certain adapter. Instead I suggest to look into the forums of Aircrack-NG and Kali/BackTrack Linux. There are several threads discussing the pros and cons of several USB adapters for wireless sniffing.