Wireshark-users: Re: [Wireshark-users] DHCP-FO Message Type and Server Status
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Chris Maynard <chris.maynard@xxxxxxxxx>
Date: Tue, 8 Feb 2011 17:33:01 +0000 (UTC)
Jürgen Dietl <juergen.dietl@...> writes:

> So I please have 2 questions:
> 
> 1. What are the numbers for the additional message-types?
> 2. In what packets should I be able to find the server states quoted above?

Graham already provided the answer to question 1.  For question 2, filter on
dhcpfo.serverstatus to find your packets of interest ( == 11 for "recover wait",
or == 7 for "recover done").

The server state information will only be present if the payload-data
serverstate option is present (DHCP_FO_PD_SERVERSTATE = 18), so you could also
filter for dhcpfo.optioncode == 18 to reveal only those packets where the
serverstatus is present, or better yet, simply filter using dhcpfo.serverstatus
alone.