Is there an "Option (3) Router" anywhere in Wireshark?

options
router
retag add tags

Is there an "Option (3) Router" anywhere in Wireshark? I'm running a Wireshark simulator in TestOut Ethical Hacker Pro and this step is part of the lab solution. I can't find it anywhere. Presumably it's supposed to display the spoofed default gateway ip address in a DHCP ACK packet after a MITM attack has been set up with Ettercap, and the interface taken down and brought back up.

I found Capture | Options but no (3) nor Router in my downloaded Wireshark.

HeavenlyHandyman

asked 2022-12-17 20:07:35 +0000

13.7k

Jaap

updated 2022-12-17 22:05:39 +0000

edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

2 Answers

Sort by

oldest

newest

most voted

Try this: dhcp.option.type == 3 as display filter, which matches for the desired DHCP option.

13.7k

Jaap

answered 2022-12-17 22:10:30 +0000

edit flag offensive 0 remove flag delete link

Comments

Hi Jaap, I tried your suggestion and got no results. I will contact TestOut Support on Monday to resolve this issue.

Thanks for trying! Happy Holidays, HH

HeavenlyHandyman (2022-12-18 02:12:23 +0000) edit

add a comment see more comments

TestOut to the rescue (as always!).

When I expanded the Bootstrap Protocol (ACK) entry in the middle panel, it displayed an entry for (3) Router (the spoofed default gateway).

All's well that ends well, and that's a deep subject (:-)

HeavenlyHandyman

answered 2022-12-19 21:34:20 +0000

edit flag offensive 0 remove flag delete link

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer

Is there an "Option (3) Router" anywhere in Wireshark? edit

Comments

2 Answers

Comments

Comments