A municipal playbook prefers writing PCAP to disk during Wi-Fi surveys. What is the primary evidence benefit?
Select an answer to reveal the explanation.
Short Explanation
Live terminals vanish; PCAPs stick around. Save the capture so analysis and the report have something stronger than a screenshot of scrolling green text.
Full Explanation
Persisting packet captures retains survey and handshake-related evidence for offline analysis, peer review, and reporting. Terminal scrollback alone is fragile and incomplete. PCAP retention does not suppress third-party SSIDs, generate certificates, or waive authorization requirements.