Is your question "Why does it capture a handshake right away?"?
If it is, then likely a client is auto-connecting. Just look at the MAC address of the captured handshake to determine which PC it is. Then look at the processes running on that PC.
d.
If it is, then likely a client is auto-connecting. Just look at the MAC address of the captured handshake to determine which PC it is. Then look at the processes running on that PC.
d.