AP List Table Explaination about hcxdumptool HOT 4 CLOSED

The status is explained in legend of --help:
Legend

real time display:
 R = + AP display:     AP is in TX range or under attack
 S = + AP display:     AUTHENTICATION KEY MANAGEMENT PSK
 P = + AP display:     got PMKID hashcat / JtR can work on
 1 = + AP display:     got EAPOL M1 (CHALLENGE)
 3 = + AP display:     got EAPOL M1M2M3 (AUTHORIZATION) hashcat / JtR can work on
 E = + CLIENT display: got EAP-START MESSAGE
 2 = + CLIENT display: got EAPOL M1M2 (ROGUE CHALLENGE) hashcat / JtR can work on

If you target an AP, a successful ATTACK will show a + in column P and/or 3 of AP display.

from hcxdumptool.

Thanks for the quick reply. I must have read the --help a dozen times and missed that lol..
I have been capturing for 2 days now, but still missing the PMKID on my target.
I will look at what I can do to make this happen - if anything?
I have successfully cracked the hash of other APs without the PMKID but I assume this makes the process quicker/more efficient for hashcat?

Thanks for adding the section on the workflow. I'm working to:
hcxdumptool - capture everything
hcxpcapngtool - convert everything (--all)
hcxhashtool - filter my target (--essid=xxxx)
At that point, I can attempt the crack the hash using the wordlist from hcxpcapngtool, or bruteforce it.
Do you have a post anywhere of how you would target an AP?
Thanks :)

from hcxdumptool.

Running hashcat on a PMKID is a little bit faster than running hashcat on an EAPOL MESSAGEPAIR with --nonce-error-corrections=0. Using higher NC values will increase the task time.
Filtering the hash by ESSID is a good idea to get full benefit of reuse of PBKDF2. Slow PBKDF2 is doing once and than the PMK is compared to all PMKIDs /MESSAGEPAIRs using the same ESSID.

Targeting an AP via Berkeley Packet Filter is explained here:
#301
starting with comment:
#301 (comment)

from hcxdumptool.

Closed this report, because it is rather a discussion
https://github.com/ZerBea/hcxdumptool/discussions
and not a bug.

from hcxdumptool.