[c-nsp] Embeded Packet Capture for DHCP Troubleshooting

Phil Mayers p.mayers at imperial.ac.uk
Tue Sep 21 12:15:56 EDT 2010


On 21/09/10 16:23, Jeff Wojciechowski wrote:

> boot up (so before the client has an ip from dhcp - isn't the dhcp
> transaction all arp?)

No. It's UDP packets on ports 67 and 68.

It uses source/dest addresses of 0.0.0.0 and 255.255.255.255, but it's 
still plain IP packets, so embedded packet capture should work.


More information about the cisco-nsp mailing list