hashcat Forum

Hi, I'm using the hashcat utilty: https://hashcat.net/cap2hccapx/ I'm capturing packets using the latest version of Wireshark and I'm saving the packets in the Wireshark/tcpdump format. I get this error when I use the utility: 

in/7995_1521602201.cap: Unsupported linktype detected

I found a similar thread to my post, but the answer did not mean anything to me.

Thanks,

Hi.
Wireshark default format is pcapng. cap2hccapx doesn't support pcapng.

(03-21-2018, 09:00 AM)ZerBea Wrote: [ -> ]Hi.
Wireshark default format is pcapng. cap2hccapx doesn't support pcapng.

Thanks ZerBea,
When I save the captures, I'm changing it to Wireshark/tcpdump in the file type dialogue box. In other words, I'm not leaving it in the default .pcapng format.

Any ideas what's wrong?

Thanks,

OK, not a Wireshark format issue.
Did you choose DLT_IEEE802_11_RADIO to be the default link-layer type for that interface (depends on OS)?
https://www.wireshark.org/lists/wireshar...00014.html

List of link-layer header types used in pcap and pcap-ng capture files:
https://www.tcpdump.org/linktypes.html

or attach cap to‎ analyze the header.

(03-21-2018, 02:23 PM)ZerBea Wrote: [ -> ]OK, not a Wireshark format issue.
Did you choose DLT_IEEE802_11_RADIO to be the default link-layer type for that interface (depends on OS)?
https://www.wireshark.org/lists/wireshar...00014.html

List of link-layer header types used in pcap and pcap-ng capture files:
https://www.tcpdump.org/linktypes.html

or attach cap to‎ analyze the header.

Thank you sir!