I have a pcap containing only handshakes (using Wireshark's eapol display filter). When run with this file as input, cap2hccapx prints "Networks detected: 0" and writes nothing. When run with the exact same capture session but no filter (all the packets captured during the session, no eapol filter) it works as expected. What packets other than the handshake does cap2hccapx require to detect networks? And, if you happen to know, what Wireshark filter will include these?
jsteube
commented
6 years ago
I have a pcap containing only handshakes (using Wireshark's eapol display filter). When run with this file as input, cap2hccapx prints "Networks detected: 0" and writes nothing. When run with the exact same capture session but no filter (all the packets captured during the session, no eapol filter) it works as expected. What packets other than the handshake does cap2hccapx require to detect networks? And, if you happen to know, what Wireshark filter will include these?