I have Metageek's Wi-Spy dbx and Wi-Spy 2.4 adapters with me. Is it possible to use either of them as the wireless adapter to capture packets using Wireshark...? asked 24 Aug '15, 22:32 adheeshak edited 25 Aug '15, 20:44 Guy Harris ♦♦ |
3 Answers:
If WinPCap can discover the adapters under Wireshark's [Capture] -> [Interfaces] or tshark's -D option, you should be able to use them. Cheers, answered 25 Aug '15, 00:16 Walter Benton
It can't, because they're not adapters. See my answer. (25 Aug '15, 20:43) Guy Harris ♦♦ |
Unfortunately, MetaGeek's Web site appears to have been taken over by marketoons who want the Web site to talk about "solutions", rather than "products" - their "products" page doesn't list "what they make", it lists product bundles and prices, so it's hard to find where they describe the Wi-Spy hardware that they offer. However, with enough digging, I found the Chanalyzer + Wi-Spy User Guide, which says:
so, no, you cannot use a Wi-Spy as a capture adapter, on any OS. It has a radio and an antenna, just as a Wi-Fi adapter does, but, instead of doing 802.11-style processing on the radio signals to turn them into 802.11 packets to hand to the host, it does spectrum analysis, showing the signal power at different frequencies throughout its frequency range. answered 25 Aug '15, 15:25 Guy Harris ♦♦ |
At least the original hardware generation of the Wi-Spy was a Bluetooth adapter with a modified firmware. Thus the 1 MHz steps used for scanning the spectrum. And thus not 802.11 (bgn) capable. answered 25 Aug '15, 23:30 jmayer |
Did you read the wiki page regarding WLAN capturing using Wireshark?
https://wiki.wireshark.org/CaptureSetup/WLAN
Yes, but that doesn't apply to Wi-Spy spectrum analyzers, because they aren't adapters, they're spectrum analyzers.
Yes... but as I stated... if they are not recognized as adapters by WinPCap... they cannot be used by WireShark...
I use AirCap which is identified as a valid adapter. And I see the 802.11 packets as they are captured.
FWIW