Forum Thread: How Can We Check if There is a Wpa Handshake Manually?

I know it say on the top of the airodump if there is a wpa handshake. However I guess it's not very stable. So how can we check it manually with wireshark or etc.?

When I filterede .cap file with "eapol || wlan.fc.typesubtype == 0x04 || wlan.fc.typesubtype == 0x08" If there are some info like message 4 of 4, does it mean that I got the handshake?