• For thorough L2 analysis, I use AirMagnet. When I need to inject 802.11 frames, do application layer decoding and frame reconstruction, I use CommView. When I need full L2-7 decoding, I use AiroPeek or Observer.

    If money were no object, the two that work together most closely to give a full feature set are AirMagnet and CommView. When both wireless/wired functions are needed, I'd go with Etherpeek/AiroPeek or just Observer (which does both).


Page 2 of 2