[ipxe-devel] wget https://site.redacted/g34yww

Geert Stappers stappers at stappers.nl
Fri Sep 20 21:46:17 UTC 2024


On Fri, Sep 20, 2024 at 06:26:17PM +0000, Yiyi Hu via ipxe-devel wrote:
> On Thu, Sep 19, 2024 at 2:10 AM Geert Stappers wrote:
> > ....
> >
> > I should have wrote "tcpdump -i interface -w filename.pcap ether host MA:CA:DD:RE:SS".
> > And added "where MA:CA:DD:RE:SS is the MAC-address the iPXE client".
> >
> > A booting client tents to use several IP-address, especial on IPv6. So
> > when filter on a single IP-address is information on "What does happen
> > on the wire?" lost. Hence the advice to filter on ethernet address.
> >
> >
> > It was a good thing to be able to do `wget https://site.redacted/sTrinG`.
> > If had to go the URL with a webbrowser, I would have stopped bothering.
> >
> > The first file from https://site.redacted/ was text output of tcpdump.
> > Upon seeing it, I thought "No, there is Wireshark" and asked for
> > the PCAP-file.
> >
> > The second file from https://site.redacted/ was quickly scanned
> > with Wireshark. It showed me there are "duplicates" and "retransmits".
> > What is causing that strange network traffic will not be explored by me.
> > The iPXE part is working and happy with Linux.
> >
> Today, I tried to boot with different router radvd settings,
> Before, it was M=1, O=1,
> With M = 0, O=0,   M=1, O=1, all combs doesn't work.
> I think the unbootable is caused by windows iscsi boot driver doesn't
> support ipv6.
> Another possibility is iBFT stores the ipv6 info caused windows try to
> use ipv4 address to access ipv6 address, Just rough guess though.

     :-)
 

> Here is the new dump with 'ether host client-mac',  https://file.io/O2zHW2NsBmXt

Nice.  The  .pcap contained much more information as the previous one.
Such as DHCP packages.  Other thing that I noticed was, that there has
been change more as "host IPv6-address" into "ether host clientMAC".

But as said before,
the strange network traffic will not be explored by me.


Groeten
Geert Stappers
-- 
Silence is hard to parse


More information about the ipxe-devel mailing list