RE: ARP interfering with Etherboot TFTP?

John Connett/ENG/UK/Plasmon <[email protected]> Wed, 08 Mar 2006 12:36:02 +0000
Newsgroups gmane.network.etherboot.devel
Message-ID <[email protected]>
I think I may have found something curious!  Consider the ethereal
output below.  In particular, the ARP responses.

    First Response:  MAC Address 00:30:05:93:54:c5
                                          ^^
    Second Response: MAC Address 00:30:05:83:54:c5
                                          ^^

The successful TFTP exchanges use the '83' MAC address.  The
unsuccessful TFTP Data Packet messages are attempting to use the '93'
MAC address ...

There appears to be no '93' MAC address on the network and it differs
by only one bit from the good '83' MAC address.

Anyone seen anything like this before?

Regards
--
John Connett


Ethereal output
---------------

Capture Filter: (ether host 00:30:05:93:54:c5) or
                (src host skylon and dst host 255.255.255.255) or
                (src host skylon and dst host nogbad) or
                (src host nogbad and dst host skylon)

First Packet: 2006-03-08 10:59:09
Last Packet:  2006-03-08 10:59:47

 ...
17232 15.204 10.4.2.152       10.4.2.46        TFTP Data Packet, Block:
8586
17233 15.204 10.4.2.46        10.4.2.152       TFTP Acknowledgement,
Block: 8586
17234 15.238 skylon.devel.pcs 10.4.2.46        ARP  Who has 10.4.2.46?
Tell 10.4.2.152
17235 15.238 nogbad.devel.pcs skylon.devel.pcs ARP  10.4.2.46 is at
00:30:05:93:54:c5
17236 15.238 10.4.2.46        skylon.devel.pcs ARP  10.4.2.46 is at
00:30:05:83:54:c5
17237 15.272 10.4.2.152       10.4.2.46        TFTP Data Packet, Block:
8587
17238 15.482 10.4.2.46        10.4.2.152       ICMP Destination
unreachable (Port unreachable)
17239 19.030 10.4.2.46        10.4.2.152       TFTP Acknowledgement,
Block: 8586
17240 19.030 10.4.2.152       10.4.2.46        ICMP Destination
unreachable (Port unreachable)
17241 25.730 10.4.2.46        10.4.2.152       TFTP Acknowledgement,
Block: 8586
17242 25.730 10.4.2.152       10.4.2.46        ICMP Destination
unreachable (Port unreachable)
17243 37.813 10.4.2.46        10.4.2.152       TFTP Acknowledgement,
Block: 8586
17244 37.813 10.4.2.152       10.4.2.46        ICMP Destination
unreachable (Port unreachable)

/var/log/syslog
---------------
Mar  8 10:56:57 skylon kernel: device eth0 entered promiscuous mode
Mar  8 10:59:11 skylon atftpd[15605]: Serving undi.zpxe to
10.4.2.46:2070
Mar  8 10:59:11 skylon atftpd[15605]: Serving undi.zpxe to
10.4.2.46:2071
Mar  8 10:59:19 skylon atftpd[15605]: Serving kernel to 10.4.2.46:2001
Mar  8 10:59:24 skylon atftpd[15605]: recvmsg: Connection refused
Mar  8 10:59:24 skylon atftpd[15605]: tftpd_file.c: 926: recvfrom:
Connection refused
Mar  8 10:59:54 skylon kernel: device eth0 left promiscuous mode




-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642