Skip to content

PCAPng

analiti can generate a PCAPng records for all WiFi beacons as they are scanned.

Note: only EXPERT users can use PCAPng features.

Real-time Streaming

analiti implements an internal TCP server that can stream PCAPng records as they are generated - in real-time - to connected clients.

Streams are compatible with Wireshark's TCP Socket pipes. The app provides compatible pipe names. If the Wireshark host and the analiti devices are not on the same network, the user can use a VPN (e.g., Tailscale) to ensure reachability.

PCAP Viewer

analiti provides direct access to Wireshark decoding of the latest WiFi scan.

While in the PCAP Viewer screen, users can use Wireshark display filters to better focus on relevant frames.

In addition, while in the PCAP Viewer screen, users can open external PCAPng files stored on their devices for analysis, even when generated by other apps.

PCAPng Files

Users can:

  • Save the PCAPng session file locally on the device
  • Share the PCAPng session file using other apps (e.g. gmail)

Users can also:

  • Upload the PCAPng session file to CloudShark or Arista Packets (both require credentials)
  • Automatically upload the PCAPng to CloudShark or Arista Packets when exiting the analiti app
  • Automatically send the PCAPng session file to the user's signed-in email address

Configuration

The Settings ► WiFi Scanning & PCAPng Sessions screen is used to configure PCAPng related aspects.