Handshake extraction failed!
#1
Exclamation 
Hello I have this error message when trying to convert a pcap file from a pmkid sniffer (esp32 marauder).
It has multiple eapol lines that should contain the encoded wifi password in it so I don't know why it doesn't work, thanks for your help !

Handshake extraction failed!
hcxpcapngtool 6.3.1 reading from 930709_1702061198.cap...
summary capture file
--------------------
file name................................: 930709_1702061198.cap
version (pcap/cap).......................: 2.4 (very basic format without any additional information)
timestamp minimum (GMT)..................: 01.01.1970 01:10:22
timestamp maximum (GMT)..................: 01.01.1970 01:11:00
used capture interfaces..................: 1
link layer header type...................: DLT_IEEE802_11 (105) very basic format without any additional information about the quality
endianness (capture system)..............: little endian
packets inside...........................: 796
ESSID (total unique).....................: 3
BEACON (total)...........................: 315
BEACON on 2.4 GHz channel (from IE_TAG)..: 1 3
ACTION (total)...........................: 75
PROBEREQUEST (undirected)................: 29
PROBERESPONSE (total)....................: 87
DEAUTHENTICATION (total).................: 1
AUTHENTICATION (total)...................: 1
AUTHENTICATION (OPEN SYSTEM).............: 1
WPA encrypted............................: 97
IPv4 (total).............................: 1
TCP (total)..............................: 1
EAPOL messages (total)...................: 177
EAPOL RSN messages.......................: 177
EAPOL ANONCE error corrections (NC)......: not detected
EAPOL M1 messages (total)................: 174
EAPOL M3 messages (total)................: 3
Information: limited dump file format detected!
This file format is a very basic format to save captured network data.
It is recommended to use PCAP Next Generation dump file format (or pcapng for short) instead.
The PCAP Next Generation dump file format is an attempt to overcome the limitations
of the currently widely used (but very limited) libpcap (cap, pcap) format.
https://www.wireshark.org/docs/wsug_html...lesSection
https://github.com/pcapng/pcapng
Information: radiotap header is missing!
Radiotap is a de facto standard for 802.11 frame injection and
reception. The radiotap header format is a mechanism to supply
additional information about frames, rom the driver to userspace
applications.
https://www.radiotap.org/
Information: no hashes written to hash files
session summary
---------------
processed cap files...................: 1
Reply


Messages In This Thread
Handshake extraction failed! - by dowan35 - 12-08-2023, 08:52 PM
RE: Handshake extraction failed! - by ZerBea - 12-08-2023, 09:12 PM
RE: Handshake extraction failed! - by dowan35 - 12-08-2023, 09:52 PM
RE: Handshake extraction failed! - by ZerBea - 12-08-2023, 10:31 PM
RE: Handshake extraction failed! - by dowan35 - 12-09-2023, 12:23 AM