


Once the handshake packets are captured, they are shown in the program:Īll captured packets can be mirrored into a pcap-file (for further analysis in third-party software). Do note that, if you use this option, you could miss proper handshakes on currently inactive channels while the program monitors another channel. In this case, the program will monitor all channels one after another. You can also monitor several channels at once by pressing Multiple. The program will start monitoring the selected channel across all wireless networks in range. Select an access point and press Use selected. If you're unsure about the channel, press, and the program will start monitoring all channels you can press Save at any time to save the list of available networks:

Once the drivers for the adapter and NDIS drivers are installed, select the correct device (for AipPCap adapters, it is typically listed as \\.\airpcap00 device) and channel and press. Even generic noname adapters may work correctly if you can find a stable driver that does not cause the program (or the system) to fail.

You must have the drivers installed read NDIS driver installation for more details.Īs for adapter compatibility, it depends on the corresponding adapter's drivers quality. To start capturing network packets, select WiFi sniffer on the tool bar, or AirPCap sniffer if you have an AirPCap adapter. Capturing network packets ELCOMSOFT.COM » Elcomsoft Wireless Security Auditor
