Forum Thread: How to Extract Wpa Handshake from a Large .Cap File

How to Extract Wpa Handshake from a Large .Cap File

I'm gonna send my .cap file to one of the online crackers. But the limit is 10mb and mine is 29. How can I extract it?

Edit: I found it. Open the .cap file with wireshark and filter the result with "eapol || wlan.fc.typesubtype == 0x04 || wlan.fc.typesubtype == 0x08" (without quotes) then the save "ONLY DISPLAYED" results.

Be the First to Respond

Share Your Thoughts

  • Hot
  • Active