In my previous response, I pointed out that it was BOOTP and assumed it was just the switch forwarding BOOTP broadcasts. But upon seeing your message, I would like to agree with you that it could be the switch itself sending the BOOTP request.
Notice that the sender is: 0:10:b:3c:35:80. I looked up that vendor code (00100B) in my handy OUI list, and it is Cisco. FYI, the best OUI vendor list that I have found is here: http://standards.ieee.org/regauth/oui/oui.txt Priscilla At 06:19 AM 2/1/02, Darren Robinson wrote: >I believe that when the 2900's boot up without an IP address (on vlan1) >they will try to get one using BootP. If you give vlan 1 an IP address >(even a bogus one if you are not using that vlan) it should stop the >broadcasts. > >Darren > > > >-----Original Message----- >From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of >Tay Chee Yong >Sent: 01 February 2002 10:16 >To: [EMAIL PROTECTED] >Subject: Cat2924 sending out broadcast message [7:34024] > >Hi all, > >Just like to enquire some issue regarding Catalyst 2924 > >I have a pretty old Catalyst 2924 (C2900XL-H-M) switch in my office >running >IOS Version 11.2(8)SA3, however, it seems that the switch is constantly >sending out broadcast messages as captured by tcpdump. > >17:14:51.053952 0:10:b:3c:35:80 Broadcast ip 342: 0.0.0.0.bootpc > >255.255.255.255.bootps: secs:41926 [|bootp] >4500 0148 c93a 0000 ff11 f16a 0000 0000 >ffff ffff 0044 0043 0134 0000 0101 0600 >0000 0000 a3c6 0000 0000 0000 0000 0000 >0000 0000 0000 0000 0010 0b3c 3580 0000 >0000 0000 0000 0000 0000 0000 0000 0000 >0000 > >I did not configure any IP address on Vlan 1 on the switch, but I did >segment the switch to contain 2 more vlans (Vlan 2, 3) However, I also >have >some machines residing on Vlan 1. > >However, the broadcast problem disappear after I move out the vlan1 >machines into another newly created Vlan (vlan 4), after I had shutdown >Interface Vlan 1. > >Can anyone care to enlighten me? Thanks. > >Regards, >Cheeyong ________________________ Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=34088&t=34024 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]