How do I set a display filter in wireshark that sorts by destination broadcast?

Question

1   0.000000    Vmware_90:07:7b    Broadcast             ARP    60  Who has 192.168.185.144? Tell 192.168.185.7
27  0.995837    28.144.7.123       192.168.185.144      HTTP    1177    HTTP/1.1 200 OK (image/x-icon)

I have a bunch of packets like these in wire shark. I know how to set a display filter using number IP address:

 ip.addr == 10.43.54.65

But how would I set a display filter so it only displays the packet that has "Broadcast" as their destination port?

So in this case: it would only show the first row/packet:

1   0.000000    Vmware_90:07:7b    Broadcast             ARP    60  Who has 192.168.185.144? Tell 192.168.185.7

Answer 1

But how would I set a display filter so it only displays the packet that has "Broadcast" as their destination port?

There is no broadcast port. Ports are transport protocol addresses, and they are individually assigned to processes.

Broadcast addresses are either IPv4 or data-link addresses. The IPv4 limited broadcast address is 255.255.255.255, which is what ARP should use. There is also a network broadcast address, which is the last address in the network range, e.g. 192.168.185.255 is the network broadcast address for the 192.168.185.0/24 network (but do not make the mistake of thinking every network broadcast address end in .255, or that every .255 address is a network broadcast address).

Data-link broadcast addresses vary, but the broadcast address for 48-bit IEEE MAC addresses is ff:ff:ff:ff:ff:ff.