Hallo,

I tried to get the WPA Key from my AP where a client is connected.
After running aireplay deauth attack, airodump shows that the WPA handshake was captured.
I used this command:
airodump-ng -c 11 -w psk --bssid apmac wlan0
But there is only one cap file called psk-01.cap, I think there have to be 4 cap files?
So the dictionary attack with aircrack-ng and the right passphrase in the dict failed.
Why is there only one cap file?