
Notice that the destination address is the IP address of the DHCP server. Notice that the source address is your IP address.
Expand Internet Protocol Version 4 to view IP details. You can use ipconfig /all and arp -a to confirm. The destination should be your DHCP server's MAC address and the source should be your MAC address. Observe the Destination and Source fields.
Expand Ethernet II to view Ethernet details. Notice that it is an Ethernet II / Internet Protocol Version 4 / User Datagram Protocol / Bootstrap Protocol frame. Observe the packet details in the middle Wireshark packet details pane.
In the top Wireshark packet list pane, select the first DHCP packet, labeled DHCP Request.
To view only DHCP traffic, type udp.port = 68 (lower case) in the Filter box and press Enter. Observe the traffic captured in the top Wireshark packet list pane.To analyze DHCP Request (lease renewal) traffic: Activity 2 - Analyze DHCP Request Traffic Edit