 | 1 | initial version |
Try a different tool - in fact, all four EAPOLs are not required to collect the necessary keys for decryption. I was able to collect three decrypted frames with airdecap:
user@host:~/tmp$ airdecap-ng -l -e AP-Clusir-1 -p 2bqWIk4cRFONqpvo24We clusir8-01.cap
Total number of stations seen 1
Total number of packets read 127
Total number of WEP data packets 0
Total number of WPA data packets 6
Number of plaintext data packets 0
Number of decrypted WEP packets 0
Number of corrupted WEP packets 0
Number of decrypted WPA packets 3
Number of bad TKIP (WPA) packets 0
Number of bad CCMP (WPA) packets 0