Get started
Do live captures with Wireshark
Launch live captures directly in Wireshark from Airtool 2.
By default, Airtool 2 generates capture files and saves them to your Mac or cloud service. However, you can also choose to launch Wireshark to see the capture live. In this case, Airtool 2 does not generate a capture file; instead, packets are sent to Wireshark to be displayed immediately as the capture happens. When the capture is terminated, you can save the file from Wireshark if necessary.
To do a live capture, you can either go to the Airtool 2 menu bar extra > Settings > General and choose to launch captures in Wireshark, or Option-Click a capture menu option to automatically start a capture session in Wireshark using the selected channel(s) and channel width.
Live captures can be done using single or multiple channel captures. You can also do a remote live capture when capturing from a sensor. In this case, packets are captured remotely and sent to Airtool 2, which then forwards the packets to Wireshark to be displayed.