Doubt about hcxdumptool output (Columns "P", "3" and "2") about hcxdumptool HOT 1 CLOSED

10:31:19 you got a + every column which means you got a PMKID, an EAPL MESSAGEPAIR M1M2 (challenge) and an EAPOL MESSAGEPAIR M2M3 (authorized). That is more than enough and hashcat/JtR can work on it.

10:30:46 the + in R column disappeared. That means that this AP is not longer under attack or it is out of Range.
This is no problem, because you got a PMKID, an EAPL MESSAGEPAIR M1M2 (challenge) and an EAPOL MESSAGEPAIR M2M3 (authorized). That is more than enough and hashcat/JtR can work on it.

10:30:46 No + in the R column. You got no 4way handshake, but a PMKID. hashcat and JtR can work on it.

10:36:26 + in R column and Plus in 1 column. The AP is still under attack and hcxdumptool is waiting for a CLIENT because the AP does not support PMKID caching. There are no hashes hashcat or JtR can work on.

10:30:35 The AP is out of range and no longer under attack. There are no hashes hashcat or JtR can work on

10:36:38 + in R column and Plus in 1 column. The AP is still under attack and hcxdumptool is waiting for a CLIENT because the AP does not support PMKID caching. There are no hashes hashcat or JtR can work on.

10:31:19 AP is still under attack, but it does not respond to hcxdumptool.

10:31:31 AP is not in range

10:31:46 AP is still under attack, but it does not respond to hcxdumptool.

Hashcat / Jtr can work on the first three entries. of the list.

Please notice:
The EAPOL TIMEOUT to detect a valid handshake is much lower than on hcxpcapngtool.
This makes sure that hcxdumptool stops an attack only on very good handshakes but it is possible that much more handshakes are recorded

To verify this, you can (at any time) run hcxpcapngtool in parallel on the pcapng file:
$ hcxpcapngtool -o hash.hc2200 -E essidlist dumpfile.pcapng
and use hcxhashtool to see if your target is already inside:

$ hcxhashtool -i hash.hc2200 -E owned
$ cat owned

BTW:
I'll convert move this to discussions, because it is not an issue.

from hcxdumptool.