Geert Stappers
2015-Feb-07 18:50 UTC
[syslinux] Problems with EFI PXE boot on Hp DL380p Gen9
On Sat, Feb 07, 2015 at 01:06:06PM -0500, Gene Cumm wrote:> On Fri, Feb 6, 2015 at 4:57 AM, Holger Baust wrote: > > Am 06.02.2015 um 07:44 schrieb Geert Stappers: > >>>> On Thu, Feb 05, 2015 at 07:02:07PM +0100, Holger Baust wrote: > >>>>> My IP is 0.0.0.0 > >>>>> Any suggestion / hint ? > >>>> The (IMHO) missing information is the "DHCP Acknowledge" > >>>> that should have been between package #8 and #9. > >>>> > >>>> Capture that missing package. It should be "visible" at the DHCP server > >>>> > >>> Hmm.. This might be difficult. tftpd and dhcp are on the same system. > >>> If there was one, this should have been captured.<snip/>> > Guess what the filter setting was? ;) > > > > tcpdump -ni eth0.230 -s0 -w hp380g9_efi_pxe.pcap ether src c4:34:6b:b7:1b:cc or ether dst c4:34:6b:b7:1b:cc > > > > So the DHCPACK packet should have been captured...But it wasn't, neither the DHCPOFFER ...> The following has a simplification and then a specialized filter to > grab BOOTP/DHCP frames with the MAC in question. > > (ether host c4:34:6b:b7:1b:cc) or ( ( udp port 67 or udp port 68) and (udp[36:4] = 0xc4346bb7 ) and (udp[40:2] = 0x1bcc)) > > Beyond this, it feels like we'll need a specialized EFI load to try > and probe for more information.True. And be aware that it might show in this case also 'my IP is 0.0.0.0' I still think the answer is the in DHCPOFFER packet. My advice: Eliminate VLAN 230 ( eth0.230 ) from the equation. Groeten Geert Stappers -- Leven en laten leven
Holger Baust
2015-Feb-09 14:40 UTC
[syslinux] Problems with EFI PXE boot on Hp DL380p Gen9
Am 07.02.2015 um 19:50 schrieb Geert Stappers via Syslinux:> On Sat, Feb 07, 2015 at 01:06:06PM -0500, Gene Cumm wrote: >> On Fri, Feb 6, 2015 at 4:57 AM, Holger Baust wrote: >>> Am 06.02.2015 um 07:44 schrieb Geert Stappers: >>>>>> On Thu, Feb 05, 2015 at 07:02:07PM +0100, Holger Baust wrote: >>>>>>> My IP is 0.0.0.0 >>>>>>> Any suggestion / hint ? >>>>>> The (IMHO) missing information is the "DHCP Acknowledge" >>>>>> that should have been between package #8 and #9. >>>>>> >>>>>> Capture that missing package. It should be "visible" at the DHCP server >>>>>> >>>>> Hmm.. This might be difficult. tftpd and dhcp are on the same system. >>>>> If there was one, this should have been captured. > <snip/> >>> Guess what the filter setting was? ;) >>> >>> tcpdump -ni eth0.230 -s0 -w hp380g9_efi_pxe.pcap ether src c4:34:6b:b7:1b:cc or ether dst c4:34:6b:b7:1b:cc >>> >>> So the DHCPACK packet should have been captured... > But it wasn't, neither the DHCPOFFER ... > > > >> The following has a simplification and then a specialized filter to >> grab BOOTP/DHCP frames with the MAC in question. >> >> (ether host c4:34:6b:b7:1b:cc) or ( ( udp port 67 or udp port 68) and (udp[36:4] = 0xc4346bb7 ) and (udp[40:2] = 0x1bcc)) >> >> Beyond this, it feels like we'll need a specialized EFI load to try >> and probe for more information. > True. And be aware that it might show in this case also 'my IP is 0.0.0.0' > > I still think the answer is the in DHCPOFFER packet. > > My advice: Eliminate VLAN 230 ( eth0.230 ) from the equation. >The Device is eth0.230 and we have to use Tagged VLANs on this port. I have attached a new capture with this filter rules above. Hope it helps... MfG / Regards, Holger Baust -- freenet Datenkommunikations GmbH Ein Unternehmen der freenet Group Willst?tterstra?e 13 D-40549 D?sseldorf Tel.: +49 (0) 211 53087 519 Fax: +49 (0) 211 5381573 Mobil: +49 (0) 170 4930127 holger.baust at freenet.ag www.freenet.de mobil.freenet.de www.mobilcom-debitel.de Gesch?ftsf?hrung: Andreas J?rgensen, Dr. Frank R?ders Sitz der Gesellschaft: Hamburg HRB 88147, Amtsgericht Hamburg -------------- next part -------------- A non-text attachment was scrubbed... Name: hp380g9_efi_pxe_take2.pcap Type: application/vnd.tcpdump.pcap Size: 221877 bytes Desc: not available URL: <http://www.zytor.com/pipermail/syslinux/attachments/20150209/c1f7f3e9/attachment-0001.pcap> -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 181 bytes Desc: OpenPGP digital signature URL: <http://www.zytor.com/pipermail/syslinux/attachments/20150209/c1f7f3e9/attachment-0001.sig>
On Mon, Feb 9, 2015 at 9:40 AM, Holger Baust via Syslinux <syslinux at zytor.com> wrote:> Am 07.02.2015 um 19:50 schrieb Geert Stappers via Syslinux: >> On Sat, Feb 07, 2015 at 01:06:06PM -0500, Gene Cumm wrote: >>> On Fri, Feb 6, 2015 at 4:57 AM, Holger Baust wrote: >>>> Am 06.02.2015 um 07:44 schrieb Geert Stappers: >>>>>>> On Thu, Feb 05, 2015 at 07:02:07PM +0100, Holger Baust wrote: >>>>>>>> My IP is 0.0.0.0 >>>>>>>> Any suggestion / hint ? >>>>>>> The (IMHO) missing information is the "DHCP Acknowledge" >>>>>>> that should have been between package #8 and #9. >>>>>>> >>>>>>> Capture that missing package. It should be "visible" at the DHCP server >>>>>>> >>>>>> Hmm.. This might be difficult. tftpd and dhcp are on the same system. >>>>>> If there was one, this should have been captured. >> <snip/> >>>> Guess what the filter setting was? ;) >>>> >>>> tcpdump -ni eth0.230 -s0 -w hp380g9_efi_pxe.pcap ether src c4:34:6b:b7:1b:cc or ether dst c4:34:6b:b7:1b:cc >>>> >>>> So the DHCPACK packet should have been captured... >> But it wasn't, neither the DHCPOFFER ... >> >> >> >>> The following has a simplification and then a specialized filter to >>> grab BOOTP/DHCP frames with the MAC in question. >>> >>> (ether host c4:34:6b:b7:1b:cc) or ( ( udp port 67 or udp port 68) and (udp[36:4] = 0xc4346bb7 ) and (udp[40:2] = 0x1bcc)) >>> >>> Beyond this, it feels like we'll need a specialized EFI load to try >>> and probe for more information. >> True. And be aware that it might show in this case also 'my IP is 0.0.0.0' >> >> I still think the answer is the in DHCPOFFER packet. >> >> My advice: Eliminate VLAN 230 ( eth0.230 ) from the equation. >> > The Device is eth0.230 and we have to use Tagged VLANs on this port. > I have attached a new capture with this filter rules above. > Hope it helps...Ahh, much better. Now we can see the Offer/Ack. I've seen this before where the DHCP daemon send it to the broadcast address. Now to look deeper. -- -Gene