The packet capture feature saves incoming and outgoing traffic that is handled by the Wi-Fi stack in its 802.11-STATION role, a device that is connected (or attempting to connect) to a Network SSID profile.
It includes Transmitted & Received Unicast traffic from/to the identity (MAC) of the 802.11-STATION. The traffic is captured inside the device, meaning the Transmitted traffic is captured before it is fully aired out to the AP. The Received traffic is captured after it is fully received successfully from the AP.
It includes broadcast/multicast traffic sent from an AP to connected devices.
It is unaffected by the current channel or frequency used by the antenna. Traffic from supported packet types is automatically captured on any channel to which the device connects, roams, or while scanning off-channels.
It is always fully assembled in terms of 802.11: If different forms of Multiple Input Multiple Output (MIMO) and MSDU/MPDU Aggregation characteristics are applicable to WLAN over-the-air, it is not reflected in the capture.
Traffic is not encrypted with respect to 802.11 and Wi-Fi Protected Access (WPA ) encryption methods. For example, in the Transmit direction the traffic is captured before it is encrypted, and in the Receive direction it’s captured after it is decrypted.
