cap2hccapx - Networks detected: 0
#5
@ C-Sky91
Thanks for the cap file. Unfortunately the attached cap file is cleaned deadly. It doesn't contain an ESSID.
Only 4 packets inside:
packet 1: EAPOL M1 - replaycount 1
packet 2: EAPOL M4 (zeroed) - replaycount 2
packet 3: EAPOL M1 replaycount 1 (nonce-error +1)
packet 4: EAPOL M2 replaycount 2

This cap file is useless!

Did you run (too many) deauthentications? EAPOL timer of AP was destroyed between packet 2 and packet 3.

BTW:


If you need to clean a cap file, tshark is a good friend:

$ tshark -r inputcapfile -R "(wlan.fc.type_subtype == 0x00 || wlan.fc.type_subtype == 0x02 || wlan.fc.type_subtype == 0x04 || wlan.fc.type_subtype == 0x05 || wlan.fc.type_subtype == 0x08 || eapol)" -2 -F pcapng -w outputpcapngfile

or (if you prefer ancient formats)

$ tshark -r inputcapfile -R "(wlan.fc.type_subtype == 0x00 || wlan.fc.type_subtype == 0x02 || wlan.fc.type_subtype == 0x04 || wlan.fc.type_subtype == 0x05 || wlan.fc.type_subtype == 0x08 || eapol)" -2 -F pcap -w outputpcapfile


https://cloudshark.io/articles/5-reasons...to-pcapng/
Reply


Messages In This Thread
cap2hccapx - Networks detected: 0 - by C-Sky91 - 05-02-2019, 02:22 AM
RE: cap2hccapx - Networks detected: 0 - by Mem5 - 05-02-2019, 12:31 PM
RE: cap2hccapx - Networks detected: 0 - by ZerBea - 05-02-2019, 05:09 PM
RE: cap2hccapx - Networks detected: 0 - by ZerBea - 05-02-2019, 07:16 PM
RE: cap2hccapx - Networks detected: 0 - by ZerBea - 05-02-2019, 11:39 PM