Re: Log DHCP request with Sniffer/Ethreal...
From: Ed Horley (list-ed_at_13systems.com)
Date: 08/31/04
- Next message: TCRServices: "Re: mapped drives disconnect after no activity"
- Previous message: Dave: "Re: Reply to ALL IP addresses?"
- In reply to: Malic: "Log DHCP request with Sniffer/Ethreal..."
- Next in thread: Roger Hunen: "Re: Log DHCP request with Sniffer/Ethreal..."
- Messages sorted by: [ date ] [ thread ]
Date: Tue, 31 Aug 2004 13:44:16 -0700
Set up the spanport on your switch for whatever workstation you want to
capture traffic for. Run Ethereal and do a capture (take everything -
should be that much) and do a display filter (you can just put this in the
bottom filter window):
bootp.dhcp == 1
(that is two ='s, one right after the other)
That will tell you if you have any dhcp traffic on the network or not.
HTH,
Ed Horley
"Malic" <spam@houston.rr.spam> wrote in message
news:u%23x79h3jEHA.4068@TK2MSFTNGP10.phx.gbl...
> Hello
>
> We are experiencing the following issue with new PCs we have purchased
from
> IBM. We did not experience the issue with machines before the IBM
> thinkcentres we purchased.
>
> Enviornment:
> Windows2k AD with Integrated DNS and a seperate member server for DHCP.
> Workstations are Windows XP SP1
>
> Issue:
> On a warm or cold boot, immediately login and it will not run our kixtart
> login script form Domain. After being logged in for 30 seconds to 1
minute
> we then get our network connection. Browse internet connec tto email
etc...
> We have to log off and log back in to reprocess our login script.
>
> Troubleshooting...
> This has been going on for over 1 month now. We have explored endless
> possibilities...
> IBM is tring to say it is our DHCP not giving machines IPs.
>
> I need to log all DHCP traffic. From request to acknowledgement. I was
> attempting to use Ethreal to capture the traffic on UDP port 67 andd 68.
> But I'm not seeing anything. No source or destination.
>
> How can I capture a detailed log with times and the above information.
>
> Thanks,
>
>
- Next message: TCRServices: "Re: mapped drives disconnect after no activity"
- Previous message: Dave: "Re: Reply to ALL IP addresses?"
- In reply to: Malic: "Log DHCP request with Sniffer/Ethreal..."
- Next in thread: Roger Hunen: "Re: Log DHCP request with Sniffer/Ethreal..."
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
