How to Use CommView for WiFi: A Complete Guide CommView for WiFi is a powerful wireless network monitor and analyzer designed for security professionals, network administrators, and researchers. It allows you to capture, inspect, and analyze data packets passing through wireless networks.
This guide covers everything you need to get started, from system requirements to advanced packet analysis. Prerequisites and Requirements
Before installing the software, ensure your hardware and system meet the necessary criteria. Supported Operating Systems Windows 10 (64-bit) Windows 11 Windows Server 2019 / 2022 Hardware Compatibility
The most critical requirement is a compatible wireless network adapter. CommView for WiFi requires a specialized driver to place your wireless card into promiscuous (or monitor) mode. Standard Windows drivers do not support this feature.
Check the official TamoSoft website for the list of supported hardware chips (such as Intel, Atheros, or Broadcom).
External USB Wi-Fi adapters are often recommended for laptop users if the internal card is unsupported. Installation and Setup Follow these steps to set up the environment properly:
Download the Software: Get the latest version of CommView for WiFi from the official TamoSoft website.
Install the Application: Run the installer and follow the on-screen prompts.
Install the Driver: During installation, the software will ask to replace your standard Wi-Fi adapter driver with the TamoSoft driver. Accept this prompt. Reboot: Restart your computer to apply the driver changes.
Note: While the TamoSoft driver is active, your wireless card will dedicate itself to monitoring. You may lose standard internet access on that specific adapter until you switch back to the original driver. Navigating the Interface
Once opened, the main dashboard provides several tabs to organize captured data:
Nodes: Shows a real-time list of discovered Access Points (APs) and stations (connected devices).
Packets: Displays the individual data packets captured from the airwaves.
Log Files: Allows you to save, load, and manage previously recorded capture sessions.
Rules: Offers powerful filtering options to limit what data you capture. Step-by-Step: Capturing Your First Packets Step 1: Configure Capture Options
Click the Options menu and select Preferences. Under the Drivers tab, ensure your compatible Wi-Fi card is selected. Step 2: Channel Scanning
Wireless networks operate on specific frequencies (channels). Click the Play (Start Capture) button on the toolbar. A configuration window will appear.
Choose to scan all channels sequentially, or lock onto a single channel (e.g., Channel 1, 6, or 11 for 2.4 GHz) if you target a specific network. Step 3: Start the Capture
Click Start Capture. You will immediately see the Nodes and Packets tabs populate with real-time data from surrounding wireless traffic. Filtering Data Using Rules
Capturing everything can overwhelm your system memory and make analysis difficult. Use the Rules tab to narrow your focus.
MAC Address Filtering: Enter a specific MAC address to isolate traffic from one single device or Access Point.
IP Address Filtering: Restrict data capture to specific network protocols or IP ranges.
Port Filtering: Filter by ports (like port 80 for HTTP or port 443 for HTTPS) to look for specific types of web traffic.
Packet Types: Choose to capture only Management packets (beacons, association requests), Control packets, or Data packets. Analyzing Captured Packets
Switch to the Packets tab to view your data in depth. The window is split into three main panes:
Packet List: A chronological list of every captured frame, showing source, destination, protocol, and size.
Decode Pane: Breaks down the selected packet into human-readable network layers (Data Link, Network, Transport).
Hex Dump: Displays the raw hexadecimal and ASCII representation of the packet payload. Spotting WEP/WPA Handshakes
For security auditing, capturing a WPA/WPA2 4-way handshake is essential. Look for EAPOL packets in the protocol column.
CommView features a built-in handshake notification that alerts you when a clean handshake is captured. Exporting Data
CommView for WiFi saves files in its native .ncf format. However, you often need to export data to other tools like Wireshark for deeper analysis. Go to File > Log Manager. Select your log files.
Click Export and choose Wireshark/Tcpdump (pcap) or Network Monitor format. Best Practices and Legal Considerations
Authorization: Only capture traffic on networks you own or have explicit written permission to audit. Unauthorized packet sniffing is illegal in many jurisdictions.
Performance: Turn off unnecessary background applications to prevent packet dropping during high-traffic captures.
Leave a Reply