That would be a good starting point to hunt for the problem.
Please begin with output of
$ pwd
followed by (we are only interested in old .hc22000 files in the working directory)
$ ls *.hc22000
to find out if there is an old hc22000 file inside, because hcxpcapngtool appends entries to an existing file.
I just added this to hcxpcapngtool --help by last commit:
You may have noticed that your problem helps me to improve hcxtools.
Please begin with output of
$ pwd
followed by (we are only interested in old .hc22000 files in the working directory)
$ ls *.hc22000
to find out if there is an old hc22000 file inside, because hcxpcapngtool appends entries to an existing file.
I just added this to hcxpcapngtool --help by last commit:
Code:
$ hcxpcapngtool --help
...
Do not edit, merge or convert pcapng files! This will remove optional comment fields!
Detection of bit errors does not work on cleaned dump files!
Do not use hcxpcapngtool in combination with third party cap/pcap/pcapng cleaning tools (except: tshark and/or Wireshark)!
It is much better to run gzip to compress the files. Wireshark, tshark and hcxpcapngtool will understand this.
Output is appended to existing files.
Recommended tools to show additional 802.11 fields or to decrypt WiFi traffic: Wireshark and/or tshark
Recommended tool to filter converted hash by several options: hcxhashtool
Recommended tool to get default or standard PSKs: hcxpsktool
Recommended tool to calculate wordlists based on ESSID: hcxeiutool
Recommended tools to retrieve PSK from hash: hashcat, JtRYou may have noticed that your problem helps me to improve hcxtools.