*** From dhcp-server -- To unsubscribe, see the end of this message. ***
Hi
First I'd like to say that I get real good service here, despite the
problem isn't solved (yet) I'd like to say thanx to every one who tries to
help.
//Andreas
here's my snoop :
from snoop -x 0 ether 00:00:a7:13:a4:2a
OLD-BROADCAST -> BROADCAST DHCP/BOOTP BOOTREQUEST
0: ffff ffff ffff 0000 a713 a42a 0800 4500 ...........*..E.
16: 0148 0000 0000 ff11 baa5 0000 0000 ffff .H..............
32: ffff 0044 0043 0134 0000 0101 0600 0000 ...D.C.4........
48: 0000 0097 0000 0000 0000 0000 0000 0000 ................
64: 0000 0000 0000 0000 a713 a42a 0000 0401 ...........*....
80: 3b8d 0401 227c 0000 682c 0000 0000 0800 ;..."|..h,......
96: 0140 0800 fe00 0000 0000 0401 3b8e 0000 .@..........;...
112: 0001 0401 23c4 0000 0000 0000 0041 0000 ....#........A..
128: 0018 0000 0000 0000 0000 0000 0000 0000 ................
144: 0000 0000 0000 0000 0001 0000 0001 0000 ................
160: 0001 0800 fe00 0800 0000 0000 0046 0000 .............F..
176: 0001 0401 20d4 0000 0000 0000 0000 0000 .... ...........
192: 0001 0000 0001 0000 0001 0800 fe00 0800 ................
208: 0000 0800 0000 0000 0001 0800 fcd0 0800 ................
224: fca8 0401 9b70 0401 9b5e 8000 03f0 0000 .....p...^......
240: 0001 0000 0000 0401 30d0 08ff 0000 08ff ........0.......
256: 5b88 0000 4254 0401 3d74 0000 0001 0800 [...BT..=t......
272: fcd0 0800 fca8 0000 0000 0800 d1dc 0000 ................
288: 0018 0000 0000 0000 0000 0000 6218 08ff ............b...
304: 61f0 08ff 0150 f800 0000 0001 0800 0000 a....P�.........
320: 0001 0800 0000 0400 518c 0800 0000 0000 ........Q.......
336: 4254 0401 3d08 BT..=.
kpserv -> BROADCAST DHCP/BOOTP BOOTREPLY
0: 0000 a713 a42a 0800 209f 370d 0800 4510 .....*.. .7...E.
16: 0148 0000 0000 1011 f35d ac10 0a28 ffff .H.......]...(..
32: ffff 0043 0044 0134 1d77 0201 0600 0000 ...C.D.4.w......
48: 0000 0097 0000 0000 0000 ac10 6e40 ac10 ............n@..
64: 0a28 0000 0000 0000 a713 a42a 0000 0401 .(.........*....
80: 3b8d 0401 227c 0000 0000 0000 0000 0000 ;..."|..........
96: 0000 0000 0000 0000 0000 0000 0000 0000 ................
112: 0000 0000 0000 0000 0000 0000 0000 0000 ................
128: 0000 0000 0000 0000 0000 0000 0000 0000 ................
144: 0000 0000 0000 7138 2e73 6500 0000 0000 ......q8.se.....
160: 0000 0000 0000 0000 0000 0000 0000 0000 ................
176: 0000 0000 0000 0000 0000 0000 0000 0000 ................
192: 0000 0000 0000 0000 0000 0000 0000 0000 ................
208: 0000 0000 0000 0000 0000 0000 0000 0000 ................
224: 0000 0000 0000 0000 0000 0000 0000 0000 ................
240: 0000 0000 0000 0000 0000 0000 0000 0000 ................
256: 0000 0000 0000 0000 0000 0000 0000 0000 ................
272: 0000 0000 0000 0000 0000 0800 d1dc 0000 ................
288: 0018 0000 0000 0000 0000 0000 6218 08ff ............b...
304: 61f0 08ff 0150 f800 0000 0001 0800 0000 a....P�.........
320: 0001 0800 0000 0400 518c 0800 0000 0000 ........Q.......
336: 4254 0401 3d08 BT..=.
OLD-BROADCAST -> (broadcast) ARP C Who is 172.16.110.64, ncd64 ?
0: ffff ffff ffff 0000 a713 a42a 0806 0001 ...........*....
16: 0800 0604 0001 0000 a713 a42a 0000 0000 ...........*....
32: 0000 0000 0000 ac10 6e40 0101 0600 0000 ........n@......
48: 0000 0097 0000 0000 0000 0000 ............
OLD-BROADCAST -> (broadcast) ARP C Who is 172.16.110.64, ncd64 ?
0: ffff ffff ffff 0000 a713 a42a 0806 0001 ...........*....
16: 0800 0604 0001 0000 a713 a42a 0000 0000 ...........*....
32: 0000 0000 0000 ac10 6e40 0101 0600 0000 ........n@......
48: 0000 0097 0000 0000 0000 0000 ............
ncd64 -> (broadcast) ARP C Who is 172.16.110.64, ncd64 ?
0: ffff ffff ffff 0000 a713 a42a 0806 0001 ...........*....
16: 0800 0604 0001 0000 a713 a42a ac10 6e40 ...........*..n@
32: 0000 0000 0000 ac10 6e40 0101 0600 0000 ........n@......
48: 0000 0097 0000 0000 0000 0000 ............
ncd64 -> (broadcast) ARP C Who is 172.16.10.40, kpserv ?
0: ffff ffff ffff 0000 a713 a42a 0806 0001 ...........*....
16: 0800 0604 0001 0000 a713 a42a ac10 6e40 ...........*..n@
32: 0000 0000 0000 ac10 0a28 0101 0600 0000 .........(......
48: 0000 0097 0000 0000 0000 0000 ............
kpserv -> ncd64 ARP R 172.16.10.40, kpserv is 8:0:20:9f:37:d
0: 0000 a713 a42a 0800 209f 370d 0806 0001 .....*.. .7.....
16: 0800 0604 0002 0800 209f 370d ac10 0a28 ........ .7....(
32: 0000 a713 a42a ac10 6e40 .....*..n@
ncd64 -> kpserv TFTP Read "q8.se" (octet)
0: 0800 209f 370d 0000 a713 a42a 0800 4500 .. .7......*..E.
16: 002a 0000 0000 ff11 eb39 ac10 6e40 ac10 .*.......9..n@..
32: 0a28 0045 0045 0016 0000 0001 7138 2e73 .(.E.E......q8.s
48: 6500 6f63 7465 7400 0000 0000 e.octet.....
kpserv -> ncd64 TFTP Error: file not found
0: 0000 a713 a42a 0800 209f 370d 0800 4500 .....*.. .7...E.
16: 002f ebcf 4000 ff11 bf64 ac10 0a28 ac10 ./[email protected]...(..
32: 6e40 dabe 0045 001b 1334 0005 0001 4669 [email protected]
48: 6c65 206e 6f74 2066 6f75 6e64 00 le not found.
On Wed, 5 May 1999, Ted Lemon wrote:
> *** From dhcp-server -- To unsubscribe, see the end of this message. ***
>
> Can you send me a hex dump of the packets? The snoop trace you send
> is missing some key information - what did the packet the client sent
> look like, the contents of the BOOTP packet header, and so on.
> Unfortunately, when debugging DHCP problems, I've found that trusting
> the packet sniffer's interpretation of the packet isn't always
> effective.
>
> If you invoke snoop like this: "snoop -x 0", I can interpret the
> hexadecimal output quite easily here. (I have a wicked kewl emacs
> macro :')
>
> _MelloN_
>
>
> ------------------------------------------------------------------------------
> To unsubscribe from this list, please visit http://www.fugue.com/dhcp/lists
> If you are without web access, or if you are having trouble with the web page,
> please send mail to [EMAIL PROTECTED] Please try to use the web
> page first - it will take a long time for your request to be processed by hand.
>
> Archives for this mailing list are available at
>http://www.webnology.com/list-archives/dhcp/dhcp-server
>
> ------------------------------------------------------------------------------
>
------------------------------------------------------------------------------
To unsubscribe from this list, please visit http://www.fugue.com/dhcp/lists
If you are without web access, or if you are having trouble with the web page,
please send mail to [EMAIL PROTECTED] Please try to use the web
page first - it will take a long time for your request to be processed by hand.
Archives for this mailing list are available at
http://www.webnology.com/list-archives/dhcp/dhcp-server
------------------------------------------------------------------------------