Posts: 6
	Threads: 2
	Joined: Jul 2017
	
	
 
	
		
		
		03-21-2018, 05:19 AM 
(This post was last modified: 03-21-2018, 05:20 AM by rikstick.)
		
	 
	
		Hi, I'm using the hashcat utilty: 
https://hashcat.net/cap2hccapx/ I'm capturing packets using the latest version of Wireshark and I'm saving the packets in the Wireshark/tcpdump format. I get this error when I use the utility: 
in/7995_1521602201.cap: Unsupported linktype detected
I found a similar thread to my post, but the answer did not mean anything to me.
Thanks,
	 
 
	
	
	
		
	Posts: 1,058
	Threads: 2
	Joined: Jun 2017
	
	
 
	
	
		Hi.
Wireshark default format is pcapng. cap2hccapx doesn't support pcapng.
	
	
	
	
	
 
 
	
	
	
		
	Posts: 6
	Threads: 2
	Joined: Jul 2017
	
	
 
	
	
		 (03-21-2018, 09:00 AM)ZerBea Wrote:  Hi.
Wireshark default format is pcapng. cap2hccapx doesn't support pcapng.
Thanks ZerBea,
When I save the captures, I'm changing it to Wireshark/tcpdump in the file type dialogue box. In other words, I'm not leaving it in the default .pcapng format.
Any ideas what's wrong?
Thanks,
	
 
	
	
	
	
 
 
	
	
	
		
	Posts: 1,058
	Threads: 2
	Joined: Jun 2017
	
	
 
	
		
		
		03-21-2018, 02:23 PM 
(This post was last modified: 03-21-2018, 02:29 PM by ZerBea.)
		
	 
	
		OK, not a Wireshark format issue.
Did you choose DLT_IEEE802_11_RADIO to be the default link-layer type for that interface (depends on OS)?
https://www.wireshark.org/lists/wireshar...00014.html
List of link-layer header types used in pcap and pcap-ng capture files:
https://www.tcpdump.org/linktypes.html
or attach cap to analyze the header.
	
 
 
	
	
	
		
	Posts: 6
	Threads: 2
	Joined: Jul 2017
	
	
 
	
	
		 (03-21-2018, 02:23 PM)ZerBea Wrote:  OK, not a Wireshark format issue.
Did you choose DLT_IEEE802_11_RADIO to be the default link-layer type for that interface (depends on OS)?
https://www.wireshark.org/lists/wireshar...00014.html
List of link-layer header types used in pcap and pcap-ng capture files:
https://www.tcpdump.org/linktypes.html
or attach cap to analyze the header.
Thank you sir!