> ## Documentation Index
> Fetch the complete documentation index at: https://c5tako.zipher.space/llms.txt
> Use this file to discover all available pages before exploring further.

# SNIFFER

> Use SNIFFER to inspect Wi-Fi activity and save PCAP files.

Use `SNIFFER` to view packets, interference-related signals, and devices looking for Wi-Fi, or to save data as PCAP files.

> [!NOTE]
>
> This page presents observations for inspection; finding a device does not mean it is a threat. Always compare results with the real environment.

## 🧭 Choose a tool

> [card] [Packet Monitor](#packet-monitor)
>
> View or save packets by type

> [card] [Jammer Detect](#trackers-and-other-detectors)
>
> Observe anomalies that may relate to interference

> [card] [Find Hidden AP](#trackers-and-other-detectors)
>
> Look for APs that do not normally advertise a name

> [card] [WiFi Tracker](#trackers-and-other-detectors)
>
> Track detected AP information

> [card] [STA Tracker](#trackers-and-other-detectors)
>
> Track detected client-device information

Choose `Packet Monitor` to view or save packets. Use another tool when you need a specific observation or tracker.

## 📦 Packet Monitor

```text theme={"theme":{"light":"github-light","dark":"dracula"}}
WIFI → SNIFFER → Packet Monitor
```

> [accordion] View all packets
>
> `Monitor All` displays all detected packets without saving a file.

> [accordion] View and save
>
> `All + Save` displays packets and saves a PCAP file. Check available space first in [FILES → File Explorer](https://c5tako.zipher.space/en/features/files.md#file-explorer).

> [accordion] Filter by type
>
> Choose `Deauth`, `Beacon`, `Probe`, `Auth`, `Client`, `EAPOL`, or `Action Monitor` to view that packet type only.

> [accordion] View Water Fall
>
> `Water Fall` visualizes Wi-Fi activity over time.

![C5TAKO™ Packet Monitor](https://mintcdn.com/zipherscx/rDQSUIJ--0_uf6Fx/images/device/wifi-packet-monitor.jpeg?fit=max\&auto=format\&n=rDQSUIJ--0_uf6Fx\&q=85\&s=49afcf782310511a776fd1b7fe1c1295)

## 💾 Save a PCAP step by step

**1. Check free space**

Open `FILES → File Explorer`. For extended recording, insert a supported microSD card first.

**2. Start saving**

Open `WIFI → SNIFFER → Packet Monitor → All + Save`.

**3. Collect data**

Let the device run only for the needed period. Do not capture data from networks without authorization.

**4. Stop and check the file**

Hold the center button for about one second, then open `FILES → File Explorer` to check the created file.

<video controls muted playsInline preload="metadata">
  <source src="https://mintcdn.com/zipherscx/rDQSUIJ--0_uf6Fx/videos/device/wifi-pcap-save.mp4?fit=max&auto=format&n=rDQSUIJ--0_uf6Fx&q=85&s=64ffa59fc54f571935eee1d19ba3624f" type="video/mp4" />
</video>

## 📍 Trackers and other detectors

* `Jammer Detect` is an observation aid only; an alert does not always confirm a jammer.
* `Find Hidden AP` looks for APs with hidden names; results depend on packets observed at the time.
* `WiFi Tracker` tracks APs.
* `STA Tracker` tracks client devices.

<video controls muted playsInline preload="metadata">
  <source src="https://mintcdn.com/zipherscx/rDQSUIJ--0_uf6Fx/videos/device/wifi-sniffer-tools.mp4?fit=max&auto=format&n=rDQSUIJ--0_uf6Fx&q=85&s=6d5003be9e427a391278dfafd82842f8" type="video/mp4" />
</video>

> [!NOTE]
>
> Jammer Detect, Find Hidden AP, and tracker results can vary by location and observation time.

## ⏹️ Leave an inspection screen

Use [the feature-stop procedure](https://c5tako.zipher.space/en/getting-started/controls.md#stop-an-active-feature).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.