Lightweight Wireless Grab Bag (Microsoft Network Monitor)

inadvertently see a blog (Windows crawl 802.11), which mentions the use of Microsoft Network Monitor to grab the package, so I also tried.

First the software author also uploaded the following: Microsoft Network Monitor Software

It is also very simple to use, after the installation is completed, you need to re-login to the system (that is, restart or logoff)

Then re-enter the software, you can find a lot of drivers are read out, such as:

In fact, this software not only catch wireless, but also can catch wired packets, but we are only interested in wireless packets here, so select the corresponding wireless network card in the computer, the others are canceled

As above, the computer inside the wireless network card is the Intel Wireless-n, so choose this ... Then the new Capture tab of the blue font above is converted to the following interface:

Click to start to grab the package, but also can be in

Click on the grab bag and then there's a configuration

You can specifically configure the packets under what channel to catch. I do not have much to study this here, but feel that this setting channel function may not be particularly large. From the software's name, Microsoft Network Monitor can also understand that the software is actually done under the monitor mechanism, in other words, only the locally received data or packets will be received, if the underlying address does not match, that is not to the PC, Then there is a good chance that it will be filtered out. This can also be seen from the following experiments,

If there is no local connection to the wireless network, then the wireless capture results are as follows:

Can be found, the basic is Beacon package, occasionally can catch several probe bag. Other bags such as rts/cts are not to be caught.

Then if the local association on the wireless after the capture packet access is as follows:

In addition to Beacon, we also found a lot of packets, and these packets have been decrypted, in other words, we should also deal with the above, these packets are directly on the top of the System Monitor. However, in the packet can still see some wireless time information.

However, in the end, we conclude that the packet capture software is relatively lightweight, because it is directly on the Windows top of the results of the capture, so it should be a wireless network card can be used, unlike other grab packets need a special network card. But the drawback is that the amount of information is very small, and grasping the packet is not complete, used to do wireless network debugging is OK, but used to do wireless network in-depth learning, then need to use other grab package software better.

Lightweight Wireless Grab Bag (Microsoft Network Monitor)