When I type in the address bar and press enter button, my browser notices that it needs to convert into IP address so it will create a dns query packet, asking the sever to translate the domain name into IP address, but the client (virtual machine) does not know dns server MAC address (it learns IP address of dns server from dhcp server during obtaining an IP address). Resolving DNS server MAC address using ARP (Address Resolution Protocol) See the details below for my capture.ģ) The virtual machine broadcasts a dhcp request packet, saying ' Hey server, I accept what you have sent me'.Ĥ) The dhcp server answers with a dhcp ack packet which lets the virtual machine know that the IP address is registered for it during period of leasing time. ALSO READ: How to analyze IPsec Traffic with WiresharkĢ) When the dhcp server receives the discover packet, it processes the request and responses back to the virtual machine with the offer packet, in short saying ' Hey client, do you want this IP address with these options'.

Http wireshark pcap