01-19-2015, 08:12 AM
After I captured a cap file with airmon-ng(and it say 4 way handshake) , i check with wireshark the eapol packets and i got two Eapol saying 2/4 message, 2/4 message.
I use hashcat converter to hccap file and they give me the file, no problem.
I thought we were suppose to have 4 eapol 1/1 , 1/2 , 1/3 , 1/4(in wireshark) to have a successful handshake ?
I use hashcat converter to hccap file and they give me the file, no problem.
I thought we were suppose to have 4 eapol 1/1 , 1/2 , 1/3 , 1/4(in wireshark) to have a successful handshake ?