09-12-2017, 10:29 PM
(This post was last modified: 09-12-2017, 10:30 PM by soxrok2212.)
(09-12-2017, 08:08 AM)philsmd Wrote: the main question that comes to my mind here is: why do you need to clean it at all?
doesn't it work also without cleaning it? The output should be 100% the same one.
maybe the only reasons you cleaned it is because there is a file size upload limit on https://hashcat.net/cap2hccapx/ but you didn't mention that this was the reason you used this cleaning process.
I'm very interested in your answer why you had to go through these steps, because from the point of view of cap2hccapx you shouldn't need to do any manipulation of the cap file before converting it.
I clean every cap manually, the reason being is that sometimes multiple handshakes are converted and hashcat speed drops by over 50%. I would also be sure to check timestamps and make sure they are from the same client <-> AP handshake.