Analysing DHCP traffic
'HC3 ('ynDPLF HRsW CRnfigXUDWLRn 3URWRFRO) SURYLGHs FRnfigXUDWLRn LnIRUPDWLRn WR hRsWs Rn 7C3/,3 nHWwRUNs. ,W is based on BOOTP (the Bootstrap Protocol) and extends it by adding more capabilities. DHCP and BOOTP both use UDP (ports 67 and 68). DHCP supports, among others, the following basic messages:
DHCPDISCOVER: Clients searching for a DHCP server