#Airtool how to
#Airtool install
#Airtool update

You can build a remote sensor or use a WLAN Pi. This custom script performs the packet capture using a compatible Wi-Fi adapter and sends the packets back to Airtool 2. A remote sensor is just a Linux box configured to allow Airtool 2 to execute a script via SSH. Īirtool 2 also allows you to do Wi-Fi packet captures using a remote sensor. It integrates with Wireshark very nicely and lets you upload captures to cloud services such as CloudShark and Packets.

After restarting, Airtool 2 should be able to use RVI to capture traffic from the device.Airtool 2 is a packet capture utility that allows you to capture Wi-Fi traffic using your Mac’s built-in Wi-Fi adapter. Go to System Preferences > Security & Privacy > General and click “Allow” to allow the system extension.

#Airtool update

On a Mac with Apple silicon, the first time you try to capture traffic from your device after enabling System Extensions, the capture may fail because macOS needs your permission to load or update the system extension that the RVI tool requires to function. The capture fails with “Unable to create or open capture interface.” To learn more about the “Trust This Computer” alert, see About the “Trust This Computer” alert on your iPhone, iPad, or iPod touch. Similarly, you may need to unlock your iPhone, iPad, or iPod touch so that Airtool 2 can see your device and capture traffic from it. Your iPhone, iPad, or iPod touch will be available to capture packet traces in Airtool 2 only if you choose to accept the device to trust the Mac when you connect it to the computer for the first time. I’ve connected my device, but I can’t see it listed in the Airtool 2 menu.

#Airtool how to

However, here we describe two problems that may prevent you from capturing from your device successfully and how to resolve them: Making sure RVI is installed and functional can be challenging, especially on a Mac with Apple silicon, but once RVI’s working, capturing from your iPhone, iPad, or iPod touch should work without any issues. For example, if you only want to display traffic from the AWDL interface, use the filter expression frame.interface_name = 'awdl0' You can also filter the trace based on that interface. You can add a column to display the interface name in Wireshark. You may verify that rvictl is correctly installed by opening Terminal and typing:

#Airtool install

When you first launch Xcode and install the additional required components, it installs the rvictl tool. If you haven’t already, install Xcode from the Mac App Store. Airtool 2 automates this process and makes capturing traffic from your iPhone, iPad, or iPod touch a 1-click operation. You connect your device to your Mac, find out the UUID of the device, use the UUID and a command-line interface tool to create the RVI for the device, and then do the capture using tcpdump by passing the name of the RVI interface and the desired tcpdump options. The process outlined by Apple to use RVI is very much manual.

RVI is a mechanism that allows you to create a virtual network interface on your Mac and use tools like tcpdump to capture packets from the iOS device attached to that virtual interface. To capture traffic from your iOS device, Airtool 2 uses a tool called Remote Virtual Interface (RVI).