A complete list of BOOTP display filter fields can be found in the display filter reference SampleCaptures/PRIV_bootp-both_overload_empty-no_end.pcapĪs DHCP is implemented as an option of BOOTP, you can only filter on BOOTP messages. SampleCaptures/PRIV_bootp-both_overload.pcap suboptions): Define custom interpretation of options Packet Cable CCC option: Option Number for Packet Cable Cable Labs Client Configuration.Ĭustom BootP/DHCP Options (Excl. Packet Cable CCC protocol version: The Packet Cable CCC protocol version. Interpreting the value as 0x000e (14) matches the time elapsed since the first request (packet #3).ĭecode Option 85 as String: Novell Servers option 85 can be configured as a string instead of address. In the example below, the secs value 0x0e00 (3584, or nearly an hour) was sent by a Windows XP client, even though the client hadn't been retrying that long. Wireshark will attempt to detect this and display the message "little endian bug?" in the packet detail. Most versions of Microsoft Windows improperly encode the secs field on the wire as little-endian.
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |