Posts: 6
Threads: 2
Joined: Jul 2017
03-21-2018, 05:19 AM
(This post was last modified: 03-21-2018, 05:20 AM by rikstick.)
Hi, I'm using the hashcat utilty:
https://hashcat.net/cap2hccapx/ I'm capturing packets using the latest version of Wireshark and I'm saving the packets in the Wireshark/tcpdump format. I get this error when I use the utility:
in/7995_1521602201.cap: Unsupported linktype detected
I found a similar thread to my post, but the answer did not mean anything to me.
Thanks,
Posts: 1,044
Threads: 2
Joined: Jun 2017
Hi.
Wireshark default format is pcapng. cap2hccapx doesn't support pcapng.
Posts: 6
Threads: 2
Joined: Jul 2017
(03-21-2018, 09:00 AM)ZerBea Wrote: Hi.
Wireshark default format is pcapng. cap2hccapx doesn't support pcapng.
Thanks ZerBea,
When I save the captures, I'm changing it to Wireshark/tcpdump in the file type dialogue box. In other words, I'm not leaving it in the default .pcapng format.
Any ideas what's wrong?
Thanks,
Posts: 1,044
Threads: 2
Joined: Jun 2017
03-21-2018, 02:23 PM
(This post was last modified: 03-21-2018, 02:29 PM by ZerBea.)
OK, not a Wireshark format issue.
Did you choose DLT_IEEE802_11_RADIO to be the default link-layer type for that interface (depends on OS)?
https://www.wireshark.org/lists/wireshar...00014.html
List of link-layer header types used in pcap and pcap-ng capture files:
https://www.tcpdump.org/linktypes.html
or attach cap to analyze the header.
Posts: 6
Threads: 2
Joined: Jul 2017
(03-21-2018, 02:23 PM)ZerBea Wrote: OK, not a Wireshark format issue.
Did you choose DLT_IEEE802_11_RADIO to be the default link-layer type for that interface (depends on OS)?
https://www.wireshark.org/lists/wireshar...00014.html
List of link-layer header types used in pcap and pcap-ng capture files:
https://www.tcpdump.org/linktypes.html
or attach cap to analyze the header.
Thank you sir!