Wireshark-users: Re: [Wireshark-users] Strange problem

From: "news.gmane.com" <AndreasSander1@xxxxxxx>
Date: Thu, 21 Apr 2011 10:54:58 +0200
"Sake Blok" <sake@xxxxxxxxxx> wrote in message 
news:6126C0DA-051E-4708-B04B-65C0777AC05A@xxxxxxxxxx...
> If you want to make a case to your ISP about this router, you might want 
> to capture all the DHCP traffic (4 packets per half lease time) for a 
> couple of hours[1]. It will show them how the router is messing up your 
> connections. If you want to check here first if there is indeed something 
> going wrong, please feel free to post the DHCP trace to the list.
>
> Cheers,
>
> Sake
>
> [1]  You can use the capture filter "udp port 67 or 68" to capture the 
> DHCP traffic
>

You can also use display filter on the existing capture for the DHCP traffic 
"udp.port==68||udp.port==67". When you see what you want to give away use 
the "Displayed" option in the "SaveAs..." dialog.

--
Andy