+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Support (https://hashcat.net/forum/forum-3.html)
+--- Forum: hashcat (https://hashcat.net/forum/forum-45.html)
+--- Thread: Convert error (/thread-11130.html)
Convert error - meanjellybean - 11-19-2022
Hello All,
I have obtained the handshake and when trying to convert with the HashCat Converter tool I get the following error:
"(PMK not recoverable)" and thus no file is generated..
Help with this is appreciated.
Handshake extraction failed!
hcxpcapngtool 6.2.7-45-g7ec5f4c reading from 27182_1668841314.cap...
summary capture file
--------------------
file name................................: 27182_1668841314.cap
version (pcap/cap).......................: 2.4 (very basic format without any additional information)
timestamp minimum (GMT)..................: 19.11.2022 07:46:35
timestamp maximum (GMT)..................: 19.11.2022 07:48:40
used capture interfaces..................: 1
link layer header type...................: DLT_IEEE802_11 (105) very basic format without any additional information about the quality
endianess (capture system)...............: little endian
packets inside...........................: 1661
ESSID (total unique).....................: 1
BEACON (total)...........................: 1
BEACON on 2.4 GHz channel (from IE_TAG)..: 6
ACTION (total)...........................: 16
PROBERESPONSE (total)....................: 37
DEAUTHENTICATION (total).................: 1536
DISASSOCIATION (total)...................: 2
AUTHENTICATION (total)...................: 5
AUTHENTICATION (OPEN SYSTEM).............: 3
AUTHENTICATION (SAE).....................: 2
ASSOCIATIONREQUEST (total)...............: 1
ASSOCIATIONREQUEST (SAE SHA256)..........: 1
WPA encrypted............................: 37
EAPOL messages (total)...................: 6
EAPOL RSN messages.......................: 6
EAPOL ANONCE error corrections (NC)......: not detected
EAPOL M1 messages (total)................: 1
EAPOL M1 messages (KDV:0 AKM defined)....: 1 (PMK not recoverable)
EAPOL M2 messages (total)................: 2
EAPOL M2 messages (KDV:0 AKM defined)....: 2 (PMK not recoverable)
EAPOL M3 messages (total)................: 1
EAPOL M3 messages (KDV:0 AKM defined)....: 1 (PMK not recoverable)
EAPOL M4 messages (total)................: 2
EAPOL M4 messages (KDV:0 AKM defined)....: 2 (PMK not recoverable)
PMKID (total)............................: 1
PMKID (KDV:0 AKM defined)................: 1 (PMK not recoverable)
Information: no hashes written to hash files
Information: limited dump file format detected!
This file format is a very basic format to save captured network data.
It is recommended to use PCAP Next Generation dump file format (or pcapng for short) instead.
The PCAP Next Generation dump file format is an attempt to overcome the limitations
of the currently widely used (but very limited) libpcap (cap, pcap) format.
https://www.wireshark.org/docs/wsug_html_chunked/AppFiles.html#ChAppFilesCaptureFilesSection
https://github.com/pcapng/pcapng
Information: radiotap header is missing!
Radiotap is a de facto standard for 802.11 frame injection and reception.
The radiotap header format is a mechanism to supply additional information about frames,
from the driver to userspace applications.
https://www.radiotap.org/
Warning: too many deauthentication/disassociation frames detected!
That can cause that an ACCESS POINT change channel, reset EAPOL TIMER,
renew ANONCE and set PMKID to zero.
This could prevent to calculate a valid EAPOL MESSAGE PAIR
or to get a valid PMKID.
Information: missing frames!
This dump file does not contain undirected proberequest frames.
An undirected proberequest may contain information about the PSK.
It always happens if the capture file was cleaned or
it could happen if filter options are used during capturing.
That makes it hard to recover the PSK.
Information: missing frames!
This dump file does not contain enough EAPOL M1 frames.
It always happens if the capture file was cleaned or
it could happen if filter options are used during capturing.
That makes it impossible to calculate nonce-error-correction values.
session summary
---------------
processed cap files...................: 1"
RE: Convert error - ZerBea - 11-21-2022
You're trying to convert a sae256/wpa3 handshake.
Code:
ASSOCIATIONREQUEST (SAE SHA256)..........: 1