12 Mar
2018
12 Mar
'18
4:31 p.m.
Ah, much easier: This does the trick. You'll need to install text2pcap and have a copy of whatever NetWorkManager was using for a wireless.conf to truly check what's going on with a particular client. wpa_supplicant -ddddd -iwlan0 -c /etc/wpa_supplicant/wireless.conf | perl -ne 'print "00000000 ff ff ff ff ff ff 00 11 22 33 44 55 88 8e $1\n" if m/RX EAPOL - hexdump\(len=\d+\): (.*)/' | text2pcap - /tmp/eapol_crap.txt & sleep 30; wpa_cli terminate; wireshark /tmp/eapol_crap.txt