05-19-2018, 03:19 AM
(05-18-2018, 05:53 PM)kexec Wrote: Maybe the problem is that the *.cap file contains only "Message 1 of 4" and "Message 2 of 4" (thats what I see in Wireshark after applying filter "eapol").
If you have M1 and M2 within the cap, then it's considered valid to be cracked. Weird how it won't convert for you. In Wireshark, filter, then manually mark the broadcast packet of the AP and M1+M2
Then go to: File > export specified packets > marked packets only
It should convert.