Version 4: HLEN = 5: Normal IP Header (5 losts of 32 bits) Service Type 0: Normal. Total Length = 328 bytes. Thus data length = 308 bytes. Identification = 51514. Flags & Offset = 0. TTL = 255. Protocol 17: UDP. Header checksum 0xf16a. Source IP : 0.0.0.0 Dest IP : 255.255.255.255 b/cast Src Port 68: bootp client Dest Port 67: bootp server Message Length = 308 (length - IP header) No Checksum:
4500 0148 c93a 0000 ff11 f16a 0000 0000 ffff ffff 0044 0043 0134 0000 0101 0600 0000 0000 a3c6 0000 0000 0000 0000 0000 0000 0000 0000 0000 0010 0b3c 3580 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 Bootp client to server. Looks like because it has no source address 0.0.0.0, it is trying to find it via a bootp server. I think this operates like RARP except it is routable !!! Not totally sure though. Regards, Phil. --- Tay Chee Yong wrote: > Hi all, > > Just like to enquire some issue regarding Catalyst > 2924 > > I have a pretty old Catalyst 2924 (C2900XL-H-M) > switch in my office running > IOS Version 11.2(8)SA3, however, it seems that the > switch is constantly > sending out broadcast messages as captured by > tcpdump. > > 17:14:51.053952 0:10:b:3c:35:80 Broadcast ip 342: > 0.0.0.0.bootpc > > 255.255.255.255.bootps: secs:41926 [|bootp] > 4500 0148 c93a 0000 ff11 f16a 0000 0000 > ffff ffff 0044 0043 0134 0000 0101 0600 > 0000 0000 a3c6 0000 0000 0000 0000 0000 > 0000 0000 0000 0000 0010 0b3c 3580 0000 > 0000 0000 0000 0000 0000 0000 0000 0000 > 0000 > > I did not configure any IP address on Vlan 1 on the > switch, but I did > segment the switch to contain 2 more vlans (Vlan 2, > 3) However, I also have > some machines residing on Vlan 1. > > However, the broadcast problem disappear after I > move out the vlan1 > machines into another newly created Vlan (vlan 4), > after I had shutdown > Interface Vlan 1. > > Can anyone care to enlighten me? Thanks. > > Regards, > Cheeyong [EMAIL PROTECTED] __________________________________________________ Do You Yahoo!? Everything you'll ever need on one web page from News and Sport to Email and Music Charts http://uk.my.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=34033&t=34024 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
