[ previous ] [ next ] [ threads ]
 
 From:  Anders Hagman <anders dot hagman at netplex dot se>
 Cc:  m0n0wall <m0n0wall at lists dot m0n0 dot ch>
 Subject:  Re: [Fwd: Re: [m0n0wall] DHCPDECLINE]
 Date:  Fri, 03 Apr 2009 09:49:07 +0200
Hi

Tim Kingman skrev:
> bc95 is the end of the real Vista client's MAC address. I don't know 
> what that means, but it seems unlikely to be coincidence, especially 
> with the equally-unlikely 00:00:0f ending. This looks like a clue, but I 
> couldn't find any more information.
> 

If bc:95 is the end of the mac address the hex will translate into:
Dest mac xx:xx:xx:xx:bc:95
Type: 81:00 (802.1Q)
VLAN # 00:0f (15)

Is the tcpdump messed up? Is it done in a messed up vista?

Can someone do a proper capture on a UNIX machine? ;->

/Anders
> 
> On Mar 28, 2009, at 12:55 PM, Bob Gustafson wrote:
> 
>> Using http://www.curreedy.com/stu/nic/
>>
>> Results:
>> (Searched using: bc9581)
>>
>> I didn't find a MAC address that matches: bc:95:81:00:00:0f
>>
>> Take a look at the notes
>>
>> On Sat, 2009-03-28 at 16:12 +0100, Wilko Lunenburg wrote:
>>> Hi,
>>>
>>> Have you tried to find it with Microsoft's knowledge base? I found this,
>>> maybe it is of any help to you:
>>>
>>> Windows Vista cannot obtain an IP address from certain routers or from
>>> certain non-Microsoft DHCP servers
>>>
>>> http://support.microsoft.com/kb/928233/en-us
>>
>>>

>>>> I haven't been able to determine who own's the macaddress 
>>>> bc:95:81:00:00:0f.
>>>> This is work in progress and i hope I'll  have an answer soon.
>>>>
>>>> However, i do not see why bc:95:81:00:00:0f should cause Vista to 
>>>> decline
>>>> the offered IP address. VISTA should only decline the IP address if it
>>>> detects an IP address conflict.
>>>>
>>>> BR

>>>>
>>>>
>>>>
>>>> -----Original Message-----
>>>> From: Claus@Monowall [mailto:Monowall at mail dash fwd dot archie dot dk]
>>>> Sent: 28. marts 2009 11:27
>>>> To: apiasecki at midatlanticbb dot com
>>>> Cc: m0n0wall at lists dot m0n0 dot ch; m0n0wall at lists dot m0n0 dot ch
>>>> Subject: RE: [m0n0wall] DHCPDECLINE
>>>>
>>>> Why is the failing ARP
>>>>
>>>>> No.     Time            Source                Destination
>>>> Protocol
>>>>> Info
>>>>>     38 15:31:12.537248 bc:95:81:00:00:0f     Broadcast             ARP
>>>>> Who has 10.0.10.157?  Tell 0.0.0.0
>>>>>
>>>>> Frame 38 (60 bytes on wire, 60 bytes captured) Ethernet II, Src:
>>>>> bc:95:81:00:00:0f (bc:95:81:00:00:0f), Dst: Broadcast
>>>>> (ff:ff:ff:ff:ff:ff)
>>>>> Address Resolution Protocol (request)
>>>>>
>>>>
>>>> Saying
>>>>
>>>> Tell 0.0.0.0
>>>>
>>>> Why not
>>>>
>>>> Tell real ip of bc:95:81:00:00:0f
>>>>
>>>> Who is bc:95:81:00:00:0f ? First time I see it is in the failing 
>>>> ARPs ??
>>>>
>>>> Claus
>>>>
>>>>
>>>>
>>>> -----Original Message-----
>>>> From: apiasecki at midatlanticbb dot com [mailto:apiasecki at midatlanticbb dot com]
>>>> Posted At: Saturday, March 28, 2009 10:14 AM Posted To: Monowall
>>>> Conversation: [m0n0wall] DHCPDECLINE
>>>> Subject: Re: [m0n0wall] DHCPDECLINE
>>>>
>>>> I have this same problem. On the same connection Windows XP will 
>>>> grab DHCP
>>>> just fine but Vista won't. I haven't figure it out either. It's only 
>>>> Vista
>>>> machines that are having this problem, all other OS's work fine. Its 
>>>> strange
>>>> because some vista machines will work fine, while others won't.
>>>> Usually i just tell the guest the call Microsoft's and explain that 
>>>> windows
>>>> XP machines are working fine on the network and Vista isn't.
>>>>
>>>> Adam
>>>
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
>> For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
>>
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
> 
>