hashcat Forum

Full Version: need help to convert .cap
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Im getting 

Handshake Extraction Failed!
error opening file stats/ESSID.txt: Permission denied

not sure how to fix this
without your commandline used, noone can nor will help you,
Just received a notice from Atom:
https://hashcat.net/cap2hashcat/
permission problem should be fixed, now.
(06-29-2021, 04:19 PM)ZerBea Wrote: [ -> ]Just received a notice from Atom:
https://hashcat.net/cap2hashcat/
permission problem should be fixed, now.

Thank you

so i got the file..  and when it converts it has warnings

 

Code:
[color=#000000]reading from 9959_1624982261.cap...

summary capture file
--------------------
file name................................: 9959_1624982261.cap
version (pcap/cap).......................: 2.4 (very basic format without any additional information)
timestamp minimum (GMT)..................: 29.06.2021 08:13:54
timestamp maximum (GMT)..................: 29.06.2021 08:20:46
used capture interfaces..................: 1
link layer header type...................: DLT_IEEE802_11 (105)
endianess (capture system)...............: little endian
packets inside...........................: 29680
BEACON (total)...........................: 1
ACTION (total)...........................: 13
PROBERESPONSE............................: 1302
DEAUTHENTICATION (total).................: 25600
DISASSOCIATION (total)...................: 1
AUTHENTICATION (total)...................: 8
AUTHENTICATION (OPEN SYSTEM).............: 8
ASSOCIATIONREQUEST (total)...............: 2
ASSOCIATIONREQUEST (PSK).................: 1
WPA encrypted............................: 33
EAPOL messages (total)...................: 42
EAPOL RSN messages.......................: 42
ESSID (total unique).....................: 1
EAPOLTIME gap (measured maximum usec)....: 86191367
EAPOL ANONCE error corrections (NC)......: not detected
REPLAYCOUNT gap (measured maximum).......: 3
EAPOL M1 messages (total)................: 40
EAPOL M2 messages (total)................: 1
EAPOL M3 messages (total)................: 1
EAPOL pairs (total)......................: 2
EAPOL pairs (best).......................: 1
EAPOL pairs written to combi hash file...: 1 (RC checked)
EAPOL M32E2 (authorized).................: 1

Warning: too many deauthentication/disassociation frames detected!
That can cause that an ACCESS POINT change channel, reset EAPOL TIMER,
renew ANONCE and set PMKID to zero.
This could prevent to calculate a valid EAPOL MESSAGE PAIR
or to get a valid PMKID.

Warning: missing frames!
This dump file does not contain undirected proberequest frames.
An undirected proberequest may contain information about the PSK.
It always happens if the capture file was cleaned or
it could happen if filter options are used during capturing.
That makes it hard to recover the PSK.


session summary
---------------
processed cap files...................: 1[/color]

is this normal if not how do i fix it?
NVM i ended up getting the file i needed ty tho for the earlier replies
You (your attack tool) ran excessive deauthentications (25600) to get a single 4way handshake
Additional your dump tool removed some important frames.

So, what you did is not "normal" and the online converter informed you about that.
To get better results, improve your procedure and consider to use other tools to get a 4way handshake and/or a PMKID.
(06-29-2021, 08:56 PM)ZerBea Wrote: [ -> ]You (your attack tool) ran excessive deauthentications (25600) to get a single 4way handshake
Additional your dump tool removed some important frames.

So, what you did is not "normal" and the online converter informed you about that.
To get better results, improve your procedure and your tools.

thank you for this info