Here's a longer tcpdump that should have a couple of rounds. The ISP does offer ipv6 but I'm not ready to give up on dhcp yet.
tcpdump: WARNING: snaplen raised from 116 to 1500 22:54:27.011337 202.63.67.36.68 > 202.63.66.1.67: xid:0x10040a18 C:202.63.67.36 vend-rfc1048 DHCP:REQUEST LT:86400 HN:"x" PR:SM+TZ+DG+DN+NS+HN+WNS MSZ:1500 CID:1.32.201.208.21.60.163 22:54:27.059554 202.63.66.1.67 > 202.63.67.36.68: xid:0x10040a18 C:202.63.67.36 Y:202.63.67.36 S:172.21.116.42 vend-rfc1048 DHCP:ACK SM:255.255.254.0 DG:202.63.66.1 NS:119.40.106.35,119.40.106.36 NTP:125.253.59.254 LT:600 SID:202.63.66.1 MSZ:1500 CID:1.32.201.208.21.60.163 [tos 0xc0] 22:58:25.011341 202.63.67.36.68 > 202.63.66.1.67: xid:0x10040a18 C:202.63.67.36 vend-rfc1048 DHCP:REQUEST LT:86400 HN:"x" PR:SM+TZ+DG+DN+NS+HN+WNS MSZ:1500 CID:1.32.201.208.21.60.163 22:58:25.062762 202.63.66.1.67 > 202.63.67.36.68: xid:0x10040a18 C:202.63.67.36 Y:202.63.67.36 S:172.21.116.42 vend-rfc1048 DHCP:ACK SM:255.255.254.0 DG:202.63.66.1 NS:119.40.106.35,119.40.106.36 NTP:125.253.59.254 LT:600 SID:202.63.66.1 MSZ:1500 CID:1.32.201.208.21.60.163 [tos 0xc0] 23:03:01.011350 202.63.67.36.68 > 202.63.66.1.67: xid:0x10040a18 C:202.63.67.36 vend-rfc1048 DHCP:REQUEST LT:86400 HN:"x" PR:SM+TZ+DG+DN+NS+HN+WNS MSZ:1500 CID:1.32.201.208.21.60.163 23:03:01.059384 202.63.66.1.67 > 202.63.67.36.68: xid:0x10040a18 C:202.63.67.36 Y:202.63.67.36 S:172.21.116.42 vend-rfc1048 DHCP:ACK SM:255.255.254.0 DG:202.63.66.1 NS:119.40.106.35,119.40.106.36 NTP:125.253.59.254 LT:600 SID:202.63.66.1 MSZ:1500 CID:1.32.201.208.21.60.163 [tos 0xc0] 23:07:49.011348 202.63.67.36.68 > 202.63.66.1.67: xid:0x10040a18 C:202.63.67.36 vend-rfc1048 DHCP:REQUEST LT:86400 HN:"x" PR:SM+TZ+DG+DN+NS+HN+WNS MSZ:1500 CID:1.32.201.208.21.60.163 23:07:49.058859 202.63.66.1.67 > 202.63.67.36.68: xid:0x10040a18 C:202.63.67.36 Y:202.63.67.36 S:172.21.116.42 vend-rfc1048 DHCP:ACK SM:255.255.254.0 DG:202.63.66.1 NS:119.40.106.35,119.40.106.36 NTP:125.253.59.254 LT:600 SID:202.63.66.1 MSZ:1500 CID:1.32.201.208.21.60.163 [tos 0xc0] 23:12:05.011350 202.63.67.36.68 > 202.63.66.1.67: xid:0x10040a18 C:202.63.67.36 vend-rfc1048 DHCP:REQUEST LT:86400 HN:"x" PR:SM+TZ+DG+DN+NS+HN+WNS MSZ:1500 CID:1.32.201.208.21.60.163 23:12:05.061192 202.63.66.1.67 > 202.63.67.36.68: xid:0x10040a18 C:202.63.67.36 Y:202.63.67.36 S:172.21.116.42 vend-rfc1048 DHCP:ACK SM:255.255.254.0 DG:202.63.66.1 NS:119.40.106.35,119.40.106.36 NTP:125.253.59.254 LT:600 SID:202.63.66.1 MSZ:1500 CID:1.32.201.208.21.60.163 [tos 0xc0] 23:16:40.229532 0.0.0.0.68 > 255.255.255.255.67: xid:0xede3396c vend-rfc1048 DHCP:REQUEST LT:86400 RQ:202.63.67.36 HN:"x" PR:SM+TZ+DG+DN+NS+HN+WNS MSZ:1500 CID:1.32.201.208.21.60.163 [tos 0x10] 23:16:46.011758 0.0.0.0.68 > 255.255.255.255.67: xid:0xede3396c secs:6 vend-rfc1048 DHCP:REQUEST LT:86400 RQ:202.63.67.36 HN:"x" PR:SM+TZ+DG+DN+NS+HN+WNS MSZ:1500 CID:1.32.201.208.21.60.163 [tos 0x10] 23:16:46.061397 202.63.66.1.67 > 255.255.255.255.68: xid:0xede3396c flags:0x8000 Y:202.63.67.36 S:172.21.116.42 ether 20:c9:d0:15:3c:a3 vend-rfc1048 DHCP:ACK SM:255.255.254.0 DG:202.63.66.1 NS:119.40.106.35,119.40.106.36 NTP:125.253.59.254 LT:600 SID:202.63.66.1 MSZ:1500 CID:1.32.201.208.21.60.163 [tos 0xc0] 23:21:03.011372 202.63.67.36.68 > 202.63.66.1.67: xid:0xede3396c C:202.63.67.36 vend-rfc1048 DHCP:REQUEST LT:86400 HN:"x" PR:SM+TZ+DG+DN+NS+HN+WNS MSZ:1500 CID:1.32.201.208.21.60.163 23:21:03.061077 202.63.66.1.67 > 202.63.67.36.68: xid:0xede3396c C:202.63.67.36 Y:202.63.67.36 S:172.21.116.42 vend-rfc1048 DHCP:ACK SM:255.255.254.0 DG:202.63.66.1 NS:119.40.106.35,119.40.106.36 NTP:125.253.59.254 LT:600 SID:202.63.66.1 MSZ:1500 CID:1.32.201.208.21.60.163 [tos 0xc0] 23:26:00.011350 202.63.67.36.68 > 202.63.66.1.67: xid:0xede3396c C:202.63.67.36 vend-rfc1048 DHCP:REQUEST LT:86400 HN:"x" PR:SM+TZ+DG+DN+NS+HN+WNS MSZ:1500 CID:1.32.201.208.21.60.163 23:26:00.061670 202.63.66.1.67 > 202.63.67.36.68: xid:0xede3396c C:202.63.67.36 Y:202.63.67.36 S:172.21.116.42 vend-rfc1048 DHCP:ACK SM:255.255.254.0 DG:202.63.66.1 NS:119.40.106.35,119.40.106.36 NTP:125.253.59.254 LT:600 SID:202.63.66.1 MSZ:1500 CID:1.32.201.208.21.60.163 [tos 0xc0] 23:29:56.011353 202.63.67.36.68 > 202.63.66.1.67: xid:0xede3396c C:202.63.67.36 vend-rfc1048 DHCP:REQUEST LT:86400 HN:"x" PR:SM+TZ+DG+DN+NS+HN+WNS MSZ:1500 CID:1.32.201.208.21.60.163 23:29:56.060547 202.63.66.1.67 > 202.63.67.36.68: xid:0xede3396c C:202.63.67.36 Y:202.63.67.36 S:172.21.116.42 vend-rfc1048 DHCP:ACK SM:255.255.254.0 DG:202.63.66.1 NS:119.40.106.35,119.40.106.36 NTP:125.253.59.254 LT:600 SID:202.63.66.1 MSZ:1500 CID:1.32.201.208.21.60.163 [tos 0xc0] 23:34:54.011347 202.63.67.36.68 > 202.63.66.1.67: xid:0xede3396c C:202.63.67.36 vend-rfc1048 DHCP:REQUEST LT:86400 HN:"x" PR:SM+TZ+DG+DN+NS+HN+WNS MSZ:1500 CID:1.32.201.208.21.60.163 23:34:54.068231 202.63.66.1.67 > 202.63.67.36.68: xid:0xede3396c C:202.63.67.36 Y:202.63.67.36 S:172.21.116.42 vend-rfc1048 DHCP:ACK SM:255.255.254.0 DG:202.63.66.1 NS:119.40.106.35,119.40.106.36 NTP:125.253.59.254 LT:600 SID:202.63.66.1 MSZ:1500 CID:1.32.201.208.21.60.163 [tos 0xc0] 23:38:54.011351 202.63.67.36.68 > 202.63.66.1.67: xid:0xede3396c C:202.63.67.36 vend-rfc1048 DHCP:REQUEST LT:86400 HN:"x" PR:SM+TZ+DG+DN+NS+HN+WNS MSZ:1500 CID:1.32.201.208.21.60.163 23:38:54.065951 202.63.66.1.67 > 202.63.67.36.68: xid:0xede3396c C:202.63.67.36 Y:202.63.67.36 S:172.21.116.42 vend-rfc1048 DHCP:ACK SM:255.255.254.0 DG:202.63.66.1 NS:119.40.106.35,119.40.106.36 NTP:125.253.59.254 LT:600 SID:202.63.66.1 MSZ:1500 CID:1.32.201.208.21.60.163 [tos 0xc0] 23:43:06.011349 202.63.67.36.68 > 202.63.66.1.67: xid:0xede3396c C:202.63.67.36 vend-rfc1048 DHCP:REQUEST LT:86400 HN:"x" PR:SM+TZ+DG+DN+NS+HN+WNS MSZ:1500 CID:1.32.201.208.21.60.163 23:43:06.059754 202.63.66.1.67 > 202.63.67.36.68: xid:0xede3396c C:202.63.67.36 Y:202.63.67.36 S:172.21.116.42 vend-rfc1048 DHCP:ACK SM:255.255.254.0 DG:202.63.66.1 NS:119.40.106.35,119.40.106.36 NTP:125.253.59.254 LT:600 SID:202.63.66.1 MSZ:1500 CID:1.32.201.208.21.60.163 [tos 0xc0] 23:47:11.081188 202.63.67.36.68 > 202.63.66.1.67: xid:0xede3396c C:202.63.67.36 vend-rfc1048 DHCP:REQUEST LT:86400 HN:"x" PR:SM+TZ+DG+DN+NS+HN+WNS MSZ:1500 CID:1.32.201.208.21.60.163 23:47:11.130797 202.63.66.1.67 > 202.63.67.36.68: xid:0xede3396c C:202.63.67.36 Y:202.63.67.36 S:172.21.116.42 vend-rfc1048 DHCP:ACK SM:255.255.254.0 DG:202.63.66.1 NS:119.40.106.35,119.40.106.36 NTP:125.253.59.254 LT:600 SID:202.63.66.1 MSZ:1500 CID:1.32.201.208.21.60.163 [tos 0xc0] 23:51:10.011259 202.63.67.36.68 > 202.63.66.1.67: xid:0xede3396c C:202.63.67.36 vend-rfc1048 DHCP:REQUEST LT:86400 HN:"x" PR:SM+TZ+DG+DN+NS+HN+WNS MSZ:1500 CID:1.32.201.208.21.60.163 23:51:10.059479 202.63.66.1.67 > 202.63.67.36.68: xid:0xede3396c C:202.63.67.36 Y:202.63.67.36 S:172.21.116.42 vend-rfc1048 DHCP:ACK SM:255.255.254.0 DG:202.63.66.1 NS:119.40.106.35,119.40.106.36 NTP:125.253.59.254 LT:600 SID:202.63.66.1 MSZ:1500 CID:1.32.201.208.21.60.163 [tos 0xc0] 23:56:04.011188 202.63.67.36.68 > 202.63.66.1.67: xid:0xede3396c C:202.63.67.36 vend-rfc1048 DHCP:REQUEST LT:86400 HN:"x" PR:SM+TZ+DG+DN+NS+HN+WNS MSZ:1500 CID:1.32.201.208.21.60.163 23:56:04.061148 202.63.66.1.67 > 202.63.67.36.68: xid:0xede3396c C:202.63.67.36 Y:202.63.67.36 S:172.21.116.42 vend-rfc1048 DHCP:ACK SM:255.255.254.0 DG:202.63.66.1 NS:119.40.106.35,119.40.106.36 NTP:125.253.59.254 LT:600 SID:202.63.66.1 MSZ:1500 CID:1.32.201.208.21.60.163 [tos 0xc0] On Thu, May 11, 2023 at 09:13:04AM +0200, Mike Fischer wrote: > You are still getting a 5 minute lease. So that seems to be normal for your > provider? (Maybe they only have a very limited pool of IPv4 addresses and > want to be able to reuse them ASAP? Might explain why the initial DHCP:OFFER > took so long as well.) > > But you don???t show what happens when the lease is to be renewed in your > dump. That is where you received the NAK on OpenBSD which caused your machine > to temporarily loose the IP, the gateway and the name servers. > > Does your provider offer IPv6? You may be better off using that. > > > Am 11.05.2023 um 05:08 schrieb David Diggles <da...@elven.com.au>: > > > > Ok here's the Apple pcap for a working implementation. > > > > tcpdump -r airport.dhcp.pcap > > > > tcpdump: WARNING: snaplen raised from 116 to 1500 > > 12:26:04.010316 0.0.0.0.bootpc > 255.255.255.255.bootps: xid:0x5fc12750 > > secs:28 vend-rfc1048 DHCP:DISCOVER LT:86400 HN:"x" PR:SM+TZ+DG+DN+NS+HN+WNS > > MSZ:1500 CID:1.32.201.208.21.60.163 [tos 0x10] > > 12:26:27.806275 0.0.0.0.bootpc > 255.255.255.255.bootps: xid:0xb4e0b61a > > vend-rfc1048 DHCP:DISCOVER LT:86400 HN:"x" PR:SM+TZ+DG+DN+NS+HN+WNS > > MSZ:1500 CID:1.32.201.208.21.60.163 [tos 0x10] > > 12:26:33.010312 0.0.0.0.bootpc > 255.255.255.255.bootps: xid:0xb4e0b61a > > secs:6 vend-rfc1048 DHCP:DISCOVER LT:86400 HN:"x" PR:SM+TZ+DG+DN+NS+HN+WNS > > MSZ:1500 CID:1.32.201.208.21.60.163 [tos 0x10] > > 12:26:44.010312 0.0.0.0.bootpc > 255.255.255.255.bootps: xid:0xb4e0b61a > > secs:17 vend-rfc1048 DHCP:DISCOVER LT:86400 HN:"x" PR:SM+TZ+DG+DN+NS+HN+WNS > > MSZ:1500 CID:1.32.201.208.21.60.163 [tos 0x10] > > 12:26:49.707196 0.0.0.0.bootpc > 255.255.255.255.bootps: xid:0x5886fe16 > > vend-rfc1048 DHCP:DISCOVER LT:86400 HN:"x" PR:SM+TZ+DG+DN+NS+HN+WNS > > MSZ:1500 CID:1.32.201.208.21.60.163 [tos 0x10] > > 12:26:55.010311 0.0.0.0.bootpc > 255.255.255.255.bootps: xid:0x5886fe16 > > secs:6 vend-rfc1048 DHCP:DISCOVER LT:86400 HN:"x" PR:SM+TZ+DG+DN+NS+HN+WNS > > MSZ:1500 CID:1.32.201.208.21.60.163 [tos 0x10] > > 12:27:03.010312 0.0.0.0.bootpc > 255.255.255.255.bootps: xid:0x5886fe16 > > secs:14 vend-rfc1048 DHCP:DISCOVER LT:86400 HN:"x" PR:SM+TZ+DG+DN+NS+HN+WNS > > MSZ:1500 CID:1.32.201.208.21.60.163 [tos 0x10] > > 12:27:12.010312 0.0.0.0.bootpc > 255.255.255.255.bootps: xid:0x5886fe16 > > secs:23 vend-rfc1048 DHCP:DISCOVER LT:86400 HN:"x" PR:SM+TZ+DG+DN+NS+HN+WNS > > MSZ:1500 CID:1.32.201.208.21.60.163 [tos 0x10] > > 12:27:57.010496 0.0.0.0.bootpc > 255.255.255.255.bootps: xid:0x34861165 > > vend-rfc1048 DHCP:DISCOVER LT:86400 HN:"x" PR:SM+TZ+DG+DN+NS+HN+WNS > > MSZ:1500 CID:1.32.201.208.21.60.163 [tos 0x10] > > 12:27:57.227277 202.63.66.1.bootps > 255.255.255.255.bootpc: > > xid:0x34861165 flags:0x8000 Y:202.63.67.36 S:172.21.116.42 ether > > 20:c9:d0:15:3c:a3 vend-rfc1048 DHCP:OFFER SM:255.255.254.0 DG:202.63.66.1 > > NS:119.40.106.35,119.40.106.36 NTP:125.253.59.254 LT:600 SID:202.63.66.1 > > MSZ:1500 CID:1.32.201.208.21.60.163 [tos 0xc0] > > 12:27:57.228177 0.0.0.0.bootpc > 255.255.255.255.bootps: xid:0x34861165 > > vend-rfc1048 DHCP:REQUEST SID:202.63.66.1 LT:86400 RQ:202.63.67.36 HN:"x" > > PR:SM+TZ+DG+DN+NS+HN+WNS MSZ:1500 CID:1.32.201.208.21.60.163 [tos 0x10] > > 12:27:58.075046 202.63.66.1.bootps > 255.255.255.255.bootpc: > > xid:0x34861165 flags:0x8000 Y:202.63.67.36 S:172.21.116.42 ether > > 20:c9:d0:15:3c:a3 vend-rfc1048 DHCP:ACK SM:255.255.254.0 DG:202.63.66.1 > > NS:119.40.106.35,119.40.106.36 NTP:125.253.59.254 LT:600 SID:202.63.66.1 > > MSZ:1500 CID:1.32.201.208.21.60.163 [tos 0xc0] > > > > On Thu, May 11, 2023 at 12:20:48AM +0200, Sebastian Benoit wrote: > >> i think that putput does not help mmuch because it does not show the DHCP > >> packet contents. > >> > >> You could write the capture to a file with "-w filename" and then copy the > >> file to the OpenBSD box for printing with "-r filename". Or send the raw > >> pcap file. > >> > >> /B. > > -- > Mike Fischer > fisc...@lavielle.com >
