This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Decode As (DHCP)

0

I tried to decode UDP packets on port 4011 as DHCP. But the Decode As dialog box shows DHCPv6 twice without DHCP option. I'm wondering if this is a bug?

asked 03 Nov '13, 06:50

orion's gravatar image

orion
6●1●1●3
accept rate: 0%

One Answer:

3

It's not a bug. DHCPv4 decoding is done by the BootP disector, so the filter and decoder name is "bootp". If you look for it in the "Decode as" section for UDP ports you'll see "BOOTP/DHCP".

answered 03 Nov '13, 20:37

Jasper's gravatar image

Jasper ♦♦
23.8k●5●51●284
accept rate: 18%

edited 03 Nov '13, 20:39

You're right, I see them. Thanks a lot.

(03 Nov '13, 23:33) orion

@orion: if a supplied answer resolves your question can you please "accept" it by clicking the checkmark icon next to it. This highlights good answers for the benefit of subsequent users with the same or similar questions.

(04 Nov '13, 05:32) Kurt Knochner ♦