Revision history [back]

There are two parts to this: capturing traffic and then analyzing it. Capturing monitor mode traffic on Windows is problematic and I don't recommend this approach, but npcap has some (poor) support for it, for some adapters (Intel is not supported according this documentation):

https://secwiki.org/w/Npcap/WiFi_adapters

If you need:

1. to use Windows
2. to use an Intel adapter

Then I suggest a commercial solution for capturing monitor mode traffic:

https://www.tamos.com/download/main/ca.php

You can save-as pcapng format and then analyze in Wireshark.