Usage

Usage Guide

🚀 Getting Started

First Launch

1. Launch Application: Run DHCP Monitor with administrator privileges
2. Select Interface: Choose the network interface to monitor
3. Start Capture: Click "Start Capture" to begin monitoring
4. View Results: Monitor DHCP packets in real-time

Interface Overview

Main Window Layout

• Top Bar: Application title and control buttons
• Sidebar: Navigation menu and quick actions
• Main Area: Content display (logs, network info, etc.)
• Status Bar: Current status and capture information

Navigation Menu

• Dashboard: Overview and summary
• Logs: All captured DHCP packets
• Option 50: Filtered Option 50 analysis
• Network: Interface information and statistics
• Settings: Application configuration

📊 Monitoring DHCP Traffic

Starting Capture

Basic Capture

1. Select network interface from dropdown
2. Click "Start Capture" button
3. Monitor real-time packet capture
4. View packet details in logs

Advanced Capture

1. Go to Settings → Network
2. Configure capture filters
3. Set buffer size and timeout
4. Enable promiscuous mode if needed
5. Start capture with custom settings

Understanding DHCP Packets

DHCP Message Types

• DHCP Discover: Client searching for DHCP server
• DHCP Offer: Server offering IP address
• DHCP Request: Client requesting offered IP
• DHCP ACK: Server confirming IP assignment
• DHCP NAK: Server denying IP request

Packet Information Display

• Timestamp: When packet was captured
• Source IP: Packet source address
• Destination IP: Packet destination address
• MAC Address: Hardware address
• Message Type: DHCP message type
• Options: DHCP options included

🎯 Option 50 Analysis

What is Option 50?

DHCP Option 50 is a "Requested IP Address" option that allows clients to request a specific IP address. This can indicate:

• Legitimate use: Reserved IP addresses
• Potential security risk: Clients trying to use unauthorized IPs
• Network policy violation: Bypassing DHCP server policies

Monitoring Option 50

Detection Features

• Real-time Detection: Instant identification of Option 50 requests
• Pattern Analysis: Identify repeated requests from same client
• Alert System: Notify when Option 50 is detected
• Logging: Detailed logs of all Option 50 activity

Analysis Tools

• Filter View: Dedicated Option 50 analysis panel
• Statistics: Count and frequency of Option 50 requests
• Client Tracking: Monitor specific clients over time
• Export Data: Export Option 50 data for analysis

Using Option 50 View

1. Navigate to Option 50: Click "Option 50" in sidebar
2. View Requests: See all Option 50 requests in real-time
3. Filter Results: Use filters to focus on specific data
4. Export Data: Export filtered results for external analysis

📈 Network Analysis

Interface Information

Available Interfaces

• Physical Interfaces: Ethernet, Wi-Fi adapters
• Virtual Interfaces: VPN, virtual machines
• Interface Status: Active, inactive, or disabled
• Traffic Statistics: Bytes sent/received

Interface Selection

1. Auto-detect: Let application choose best interface
2. Manual Selection: Choose specific interface
3. Interface Priority: Set preferred order
4. Fallback Options: Alternative interfaces if primary fails

Traffic Statistics

Real-time Metrics

• Packets per Second: Current capture rate
• Bandwidth Usage: Network utilization
• Error Count: Capture errors and issues
• Buffer Status: Memory buffer usage

Historical Data

• Trend Analysis: Traffic patterns over time
• Peak Usage: Identify high-traffic periods
• Anomaly Detection: Unusual traffic patterns
• Performance Metrics: Application performance data

📝 Log Management

Viewing Logs

Log Display Options

• All Logs: Complete packet capture history
• Filtered Logs: Apply custom filters
• Search Results: Find specific packets
• Recent Activity: Latest captured packets

Log Information

• Timestamp: Exact capture time
• Source/Destination: IP and MAC addresses
• Protocol: UDP/TCP and ports
• Length: Packet size in bytes
• Details: DHCP-specific information

Log Operations

Filtering

1. Select Filter Type: Source, destination, message type
2. Enter Filter Value: IP address, MAC address, etc.
3. Apply Filter: Click "Apply" to filter results
4. Clear Filter: Remove all filters

Searching

1. Enter Search Term: Text to search for
2. Select Search Field: Where to search
3. Execute Search: Click search button
4. View Results: Navigate through search results

Exporting

1. Select Export Range: All logs or filtered results
2. Choose Format: CSV, JSON, XML
3. Set Export Location: Where to save file
4. Export Data: Generate and save export file

🔧 Advanced Features

Custom Filters

Filter Syntax

# Basic filters
udp and port 67
udp and port 68
host 192.168.1.100

# Complex filters
(udp and port 67) or (udp and port 68)
src host 192.168.1.0/24
dst host 255.255.255.255

Creating Custom Filters

1. Go to Settings: Open configuration panel
2. Select Filters: Navigate to filter settings
3. Add New Filter: Create custom filter
4. Test Filter: Validate filter syntax
5. Save Filter: Store for future use

Alert System

Setting Up Alerts

1. Configure Alerts: Go to Settings → Alerts
2. Define Rules: Set alert conditions
3. Choose Actions: Select notification methods
4. Test Alerts: Verify alert functionality

Alert Types

• Option 50 Detection: Alert when Option 50 is found
• High Traffic: Alert on unusual traffic levels
• Error Conditions: Alert on capture errors
• Performance Issues: Alert on performance problems

📱 User Interface Tips

Keyboard Shortcuts

Navigation

• Ctrl+1: Switch to Dashboard
• Ctrl+2: Switch to Logs
• Ctrl+3: Switch to Option 50
• Ctrl+4: Switch to Network
• Ctrl+5: Switch to Settings

Capture Control

• Space: Start/Stop capture
• Ctrl+R: Refresh interface
• Ctrl+F: Open search
• Ctrl+E: Export data
• Ctrl+S: Save configuration

View Control

• Ctrl++: Zoom in
• Ctrl+-: Zoom out
• Ctrl+0: Reset zoom
• F11: Toggle fullscreen
• Ctrl+Q: Quit application

Mouse Operations

Right-click Menus

• Log Entries: Copy, export, or analyze specific packets
• Interface List: Configure or refresh interfaces
• Status Bar: Quick access to common actions
• Main Area: Context-sensitive options

Drag and Drop

• Log Export: Drag logs to external applications
• Configuration: Drag config files to import
• Interface Reorder: Drag to reorder interface priority

🔍 Troubleshooting

Common Issues

No Packets Captured

1. Check Privileges: Ensure running as administrator
2. Verify Interface: Confirm interface is active
3. Check Filters: Verify filter settings
4. Restart Capture: Stop and restart capture

Performance Issues

1. Reduce Buffer Size: Lower memory usage
2. Increase Polling: Reduce UI update frequency
3. Close Other Apps: Free up system resources
4. Check System: Monitor CPU and memory usage

Interface Problems

1. Refresh Interfaces: Reload interface list
2. Check Permissions: Verify network access
3. Restart Application: Close and reopen app
4. System Reboot: Restart operating system

Getting Help

Built-in Help

• Help Menu: Access application help
• Tooltips: Hover over elements for help
• Context Help: Right-click for options

External Resources

• Documentation: Read this wiki
• GitHub Issues: Report bugs or request features
• Discussions: Ask questions in GitHub Discussions
• Community: Join user community

📚 Next Steps

After learning the basics:

1. Explore Configuration for advanced settings
2. Check Troubleshooting for common issues
3. Review API Reference for automation
4. Return to Wiki Home for more information

🎯 Pro Tips

• Start Simple: Begin with basic capture, then add filters
• Monitor Regularly: Check logs frequently for patterns
• Use Filters: Focus on specific traffic types
• Export Data: Save important findings for analysis
• Stay Updated: Keep application updated for latest features