Airtool Pi vs EndaceProbe

Airtool Pi is an iPhone and iPad utility for remote Wi-Fi packet capture. It connects over SSH to Linux-based sensors or Linux endpoints with compatible adapters, starts a capture using selected settings, and saves a PcapNG file locally. Sensors can be added manually or automatically, including WLAN Pi and Oscium Nomad; version history also names WLAN Pi Go and Hamina Clip, and a Raspberry Pi can serve as a sensor. Capture controls include wireless interface, frequency band, channel, channel width, size limits, and an option to discard data-frame payloads. The App Store listing states support for 2.4, 5, and 6 GHz bands and widths from 20 to 320 MHz. Compatible adapters allow simultaneous capture on up to four channels. Files can be shared with Wireshark or another protocol analyzer. Airtool Pi costs $14.99 USD once and requires iOS or iPadOS 18.6 or later.

EndaceProbe continuously records complete network packets, preserving network history for investigations into security threats, performance issues, and outages. It is offered as physical appliances and cloud or virtual deployments on AWS, Microsoft Azure, VMware, KVM, and Nutanix. Listed models sustain recording from 500 Mbps to 100 Gbps, with packet storage ranging from 1 TB to more than 3 PB. InvestigationManager provides centralized search and data mining, while EndaceCMS manages physical and cloud probes. Browser-based EndaceVision searches historical packets and includes hosted Wireshark decoding without downloading large PCAP files. The platform supports live capture, offline trace analysis, display filters, protocol decryption, and pcap, pcapng, and ERF formats. Endace lists Elastic integrations and an API for open-source, custom, and Fusion Partner tools. Appliances can host applications such as EndaceFlow. Security controls include hardened Linux, disabled shell access, authentication options, role-based access, and stated certifications. Pricing is available on request.