This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I know nothing about networking. I was asked to find a percentage of all packets that are broadcast packets from a capture I did. Can someone tell me how to do that please?

asked 19 Feb '12, 12:58

sssddd's gravatar image

sssddd
1333
accept rate: 0%

edited 20 Feb '12, 09:27

multipleinterfaces's gravatar image

multipleinte...
1.3k152340


Maybe you might want to look for packets that have either a MAC address of FF:FF:FF:FF:FF:FF or an IP address of 255.255.255.255 - but that might not include all broadcast messages, because for that you would need to know all subnets and subnets masks to be able to determine what the broadcast address of a subnet is. For example 172.16.0.255 could be a broadcast if the network is 172.16.0.0/24, but if it is 172.16.0.0/16 it isn't.

By the way, this looks like a lot of questions coming from some sort of homework assignment, so if that is the case I would advise you to study and find the answers for yourself ;-)

permanent link

answered 19 Feb '12, 13:35

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×205
×100
×31

question asked: 19 Feb '12, 12:58

question was seen: 15,450 times

last updated: 20 Feb '12, 09:27

p​o​w​e​r​e​d by O​S​Q​A