https://github.com/aircrack-ng/aircrack-ng/issues/1993
https://github.com/aircrack-ng/aircrack-ng/issues/2067
If you attach the cap file here (zip compressed), we can take a look inside.
and/or run hcxpcaptool:
$ hcxpcaptool --hccap-out=test.hccap test.cap
reading from test.cap
summary capture file:
file name........................: test.cap
file type........................: pcap 2.4
file hardware information........: unknown
file os information..............: unknown
file application information.....: unknown
network type.....................: DLT_IEEE802_11 (105)
endianness.......................: little endian
read errors......................: flawless
minimum time stamp...............: 12.08.2019 17:52:17 (GMT)
maximum time stamp...............: 12.08.2019 17:52:55 (GMT)
packets inside...................: 11828
skipped packets (damaged)........: 0
packets with GPS data............: 0
packets with FCS.................: 0
beacons (total)..................: 1
probe requests...................: 7
probe responses..................: 5
association requests.............: 8
authentications (OPEN SYSTEM)....: 11
deauthentications................: 5120
action packets...................: 10
EAPOL packets (total)............: 23
EAPOL packets (WPA2).............: 23
best handshakes (total)..........: 1 (ap-less: 0)
summary output file(s):
1 handshake(s) written to test.hccap
message pair M12E2...............: 1
remarks:
Old hashcat doesn't perform nonce-error-corrections, so hcxpcaptool will do this part. In that case you find more than one converted handshake inside the hccap.
hcxpcaptool is not able to perform (good) nonce-error-corrections on wpa_cleaned capfiles and besside-ng capfiles (see issue reports above).
https://github.com/aircrack-ng/aircrack-ng/issues/2067
If you attach the cap file here (zip compressed), we can take a look inside.
and/or run hcxpcaptool:
$ hcxpcaptool --hccap-out=test.hccap test.cap
reading from test.cap
summary capture file:
file name........................: test.cap
file type........................: pcap 2.4
file hardware information........: unknown
file os information..............: unknown
file application information.....: unknown
network type.....................: DLT_IEEE802_11 (105)
endianness.......................: little endian
read errors......................: flawless
minimum time stamp...............: 12.08.2019 17:52:17 (GMT)
maximum time stamp...............: 12.08.2019 17:52:55 (GMT)
packets inside...................: 11828
skipped packets (damaged)........: 0
packets with GPS data............: 0
packets with FCS.................: 0
beacons (total)..................: 1
probe requests...................: 7
probe responses..................: 5
association requests.............: 8
authentications (OPEN SYSTEM)....: 11
deauthentications................: 5120
action packets...................: 10
EAPOL packets (total)............: 23
EAPOL packets (WPA2).............: 23
best handshakes (total)..........: 1 (ap-less: 0)
summary output file(s):
1 handshake(s) written to test.hccap
message pair M12E2...............: 1
remarks:
Old hashcat doesn't perform nonce-error-corrections, so hcxpcaptool will do this part. In that case you find more than one converted handshake inside the hccap.
hcxpcaptool is not able to perform (good) nonce-error-corrections on wpa_cleaned capfiles and besside-ng capfiles (see issue reports above).