Re: ARP interfering with Etherboot TFTP?

On Wed, Mar 08, 2006 at 12:36:02PM +0000, John Connett/ENG/UK/Plasmon wrote:
> I think I may have found something curious!  Consider the ethereal
> output below.  In particular, the ARP responses.
> 
>     First Response:  MAC Address 00:30:05:93:54:c5
>                                           ^^
>     Second Response: MAC Address 00:30:05:83:54:c5
>                                           ^^

Wired

> 17234 15.238 skylon.devel.pcs 10.4.2.46        ARP  Who has 10.4.2.46?  Tell 10.4.2.152
> 17235 15.238 nogbad.devel.pcs skylon.devel.pcs ARP  10.4.2.46 is at 00:30:05:93:54:c5
> 17236 15.238 10.4.2.46        skylon.devel.pcs ARP  10.4.2.46 is at 00:30:05:83:54:c5

Indeed curious.

A single ARP request and _two_ ARP replies.
Also strange is that one reply comes from 'nogbad' and the other from '10.4.2.46'

Please do a 'tcpdump' with the '-n' flag? From the manual page of tcpdump:


     -n     Don't  convert  addresses  (i.e., host addresses, port numbers,
            etc.) to names.


I would like to see the actual IP-addresses.


Cheers
Geert Stappers


-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642