Monitor mode 802.11 captures on OSX
- by Mike A
I'm trying to determine the difference between capturing 802.11 frames in the following ways on OSX (10.8.5). It's a bit esoteric, but I use "Option 2" to capture frames for later analysis, and am wondering if I'm missing something.
Option 1: use "airportd":
$sudo /usr/libexec/airportd en0 sniff
Option 2: use "airport" followed by tcpdump:
…