Wireshark D5 V4 - HTTP analysisDHCP analysis

The video tutorial explains the DHCP process, which dynamically assigns IP addresses to clients, allowing them to communicate over a network. It runs on UDP, with clients using Port 68 and servers using Port 67. The DORA process (Discover, Offer, Request, Acknowledge) is detailed, showing how clients request and receive IP addresses. The tutorial also covers analyzing DHCP traffic using command prompt and Wireshark, highlighting how to capture and interpret DHCP packets, including transaction IDs and lease times.

What protocol does DHCP run on top of?

• TCP

• UDP

• HTTP

• FTP

During the discovery phase of the DORA process, what does the client do?

• Waits for the server to assign an IP

• Sends a broadcast packet to all devices on the network

• Sends a unicast packet to the server

• Directly requests an IP from the server

In the acknowledgment phase, what information does the server provide to the client?

• Only the DNS server

• Only the IP address

• IP address and subnet mask

• IP address, subnet mask, DNS, and default gateway

What command is used to release the current IP address in Windows?

• ipconfig /release

• ipconfig /all

• ipconfig /renew

• ipconfig /flushdns

In Wireshark, which display filter is used to analyze DHCP packets?

• udp.port == 53

• tcp.port == 80

• bootp

• http