hcxdumptool - missing frames w/ filtering
I did attack my AP only in --filtermode=2  and i tried to connect and disconnect CLIENTS (my phones and tablets) to provide extra traffic for about 5-10 minutes.

.png   Screen Shot 2022-12-28 at 18.41.34.png (Size: 278.82 KB / Downloads: 15)
.png   Screen Shot 2022-12-28 at 18.42.22.png (Size: 175.47 KB / Downloads: 11)

Results are missing frames. But my AP's PMKID was shown during the scan.

If i do attack w/o filtering (on my and all neighbour's AP's and clients), i could catch 18 hashes including my AP's hash in about one hour.

Should i keep monitoring in filtermode more time to capture my AP's hash? Another observation that my AP's MAC  has two different addresses. Little confused here. Thank you.

Messages In This Thread
RE: hcxdumptool - missing frames w/ filtering - by pipss - 12-28-2022, 12:59 PM