new: reporting if wifi handshakes are full or half

modules/events_stream/events_view_wifi.go

@@ -80,6 +80,10 @@ func (mod *EventsStream) viewWiFiHandshakeEvent(e session.Event) {
 
 	if hand.PMKID != nil {
 		what = "RSN PMKID"
+	} else if hand.Full {
+		what += " (full)"
+	} else if hand.Half {
+		what += " (half)"
 	}
 
 	fmt.Fprintf(mod.output, "[%s] [%s] captured %s -> %s %s to %s\n",

modules/wifi/wifi_events.go

@@ -22,5 +22,7 @@ type HandshakeEvent struct {
 	NewPackets int    `json:"new_packets"`
 	AP         string `json:"ap"`
 	Station    string `json:"station"`
+	Half       bool   `json:"half"`
+	Full       bool   `json:"full"`
 	PMKID      []byte `json:"pmkid"`
 }

modules/wifi/wifi_recon_handshakes.go

@@ -102,6 +102,8 @@ func (mod *WiFiModule) discoverHandshakes(radiotap *layers.RadioTap, dot11 *laye
 				AP:         apMac.String(),
 				Station:    staMac.String(),
 				PMKID:      rawPMKID,
+				Half:       station.Handshake.Half(),
+				Full:       station.Handshake.Complete(),
 			})
 			// make sure the info that we have key material for this AP
 			// is persisted even after stations are pruned due to inactivity