lets say I run hcxdumptool (aggressively) on a one hour timer, after one hour I hard close hcxdumptool. Then I start hcxdumptool for another hour capture. I am left with two cap files, hour1.cap and hour2.cap. I did not move location so a large chunk of handshakes are from the same clients/AP. Quite a bit of overlap.
My goal is one hccapx without dupes for that day, should I:
Method 1
1. hcxpcaptool -o allday.hccapx hour1.cap hour2.cap
Method 2
1. cat hour1.cap hour2.cap > full.cap
2. hcxpcaptool -o allday.hccapx full.cap
Method 3
1. wlancap2hcx -p full.cap hour1.cap hour2.cap
2. hcxpcaptool -o allday.hccapx full.cap
I am currently using method 3, but I would like to use method 1. Does hcxpcaptool -o combine and compare all caps for the "best" handshakes?
My goal is one hccapx without dupes for that day, should I:
Method 1
1. hcxpcaptool -o allday.hccapx hour1.cap hour2.cap
Method 2
1. cat hour1.cap hour2.cap > full.cap
2. hcxpcaptool -o allday.hccapx full.cap
Method 3
1. wlancap2hcx -p full.cap hour1.cap hour2.cap
2. hcxpcaptool -o allday.hccapx full.cap
I am currently using method 3, but I would like to use method 1. Does hcxpcaptool -o combine and compare all caps for the "best" handshakes?