0

Is there an "Option (3) Router" anywhere in Wireshark?

asked 2022-12-17 20:07:35 +0000

HeavenlyHandyman
1 ●1 ●1

updated 2022-12-17 22:05:39 +0000

flag of Netherlands

13742 ●711 ●115

Is there an "Option (3) Router" anywhere in Wireshark? I'm running a Wireshark simulator in TestOut Ethical Hacker Pro and this step is part of the lab solution. I can't find it anywhere. Presumably it's supposed to display the spoofed default gateway ip address in a DHCP ACK packet after a MITM attack has been set up with Ettercap, and the interface taken down and brought back up.

I found Capture | Options but no (3) nor Router in my downloaded Wireshark.

edit retag flag offensive close merge delete

2 Answers

Sort by » oldest newest most voted

0

answered 2022-12-19 21:34:20 +0000

HeavenlyHandyman
1 ●1 ●1

TestOut to the rescue (as always!).

When I expanded the Bootstrap Protocol (ACK) entry in the middle panel, it displayed an entry for (3) Router (the spoofed default gateway).

All's well that ends well, and that's a deep subject (:-)

edit flag offensive delete link

0

answered 2022-12-17 22:10:30 +0000

flag of Netherlands

13742 ●711 ●115

Try this: dhcp.option.type == 3 as display filter, which matches for the desired DHCP option.

edit flag offensive delete link

Comments

Hi Jaap, I tried your suggestion and got no results. I will contact TestOut Support on Monday to resolve this issue.

Thanks for trying! Happy Holidays, HH

HeavenlyHandyman ( 2022-12-18 02:12:23 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Question Tools

1 follower

Stats

Asked: 2022-12-17 20:07:35 +0000

Seen: 418 times

Last updated: Dec 19 '22

Related questions