+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Misc (https://hashcat.net/forum/forum-15.html)
+--- Forum: General Talk (https://hashcat.net/forum/forum-33.html)
+--- Thread: Error when using the hashcat utility .pcap to .hccapx file (/thread-7387.html)
Error when using the hashcat utility .pcap to .hccapx file - rikstick - 03-21-2018
Hi, I'm using the hashcat utilty: https://hashcat.net/cap2hccapx/ I'm capturing packets using the latest version of Wireshark and I'm saving the packets in the Wireshark/tcpdump format. I get this error when I use the utility:
in/7995_1521602201.cap: Unsupported linktype detected
I found a similar thread to my post, but the answer did not mean anything to me.
Thanks,
RE: Error when using the hashcat utility .pcap to .hccapx file - ZerBea - 03-21-2018
Hi.
Wireshark default format is pcapng. cap2hccapx doesn't support pcapng.
RE: Error when using the hashcat utility .pcap to .hccapx file - rikstick - 03-21-2018
(03-21-2018, 09:00 AM)ZerBea Wrote: Hi.
Wireshark default format is pcapng. cap2hccapx doesn't support pcapng.
Thanks ZerBea,
When I save the captures, I'm changing it to Wireshark/tcpdump in the file type dialogue box. In other words, I'm not leaving it in the default .pcapng format.
Any ideas what's wrong?
Thanks,
RE: Error when using the hashcat utility .pcap to .hccapx file - ZerBea - 03-21-2018
OK, not a Wireshark format issue.
Did you choose DLT_IEEE802_11_RADIO to be the default link-layer type for that interface (depends on OS)?
https://www.wireshark.org/lists/wireshark-dev/200909/msg00014.html
List of link-layer header types used in pcap and pcap-ng capture files:
https://www.tcpdump.org/linktypes.html
or attach cap to analyze the header.
RE: Error when using the hashcat utility .pcap to .hccapx file - rikstick - 03-21-2018
(03-21-2018, 02:23 PM)ZerBea Wrote: OK, not a Wireshark format issue.
Did you choose DLT_IEEE802_11_RADIO to be the default link-layer type for that interface (depends on OS)?
https://www.wireshark.org/lists/wireshark-dev/200909/msg00014.html
List of link-layer header types used in pcap and pcap-ng capture files:
https://www.tcpdump.org/linktypes.html
or attach cap to analyze the header.
Thank you sir!