{"id":2374,"date":"2019-04-10T22:13:26","date_gmt":"2019-04-10T13:13:26","guid":{"rendered":"http:\/\/matoken.org\/blog\/?p=2374"},"modified":"2019-04-10T22:16:01","modified_gmt":"2019-04-10T13:16:01","slug":"a-memo-to-capture-dhcp-packets","status":"publish","type":"post","link":"https:\/\/matoken.org\/blog\/2019\/04\/10\/a-memo-to-capture-dhcp-packets\/","title":{"rendered":"dhcp \u30d1\u30b1\u30c3\u30c8\u3092\u30ad\u30e3\u30d7\u30c1\u30e3\u3059\u308b\u30e1\u30e2"},"content":{"rendered":"<div class=\"listingblock\">\n<div class=\"title\">tcpdump\u306e\u5834\u5408<\/div>\n<div class=\"content\">\n<pre>$ sudo tcpdump -i wlp3s0 port 67 or port 68 -e -n\r\n[sudo] password for matoken:\r\ntcpdump: verbose output suppressed, use -v or -vv for full protocol decode\r\nlistening on wlp3s0, link-type EN10MB (Ethernet), capture size 262144 bytes\r\n21:07:44.898511 00:23:15:5b:a6:60 &gt; ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 0.0.0.0.68 &gt; 255.255.255.255.67: BOOTP\/DHCP, Request from 00:23:15:5b:a6:60, length 300\r\n<\/pre>\n<\/div>\n<\/div>\n<div class=\"listingblock\">\n<div class=\"title\">dhcpdump \u3082\u8aad\u307f\u3084\u3059\u304f\u3066\u4fbf\u5229<\/div>\n<div class=\"content\">\n<pre>$ sudo dhcpdump -i wlp3s0\r\n  TIME: 2019-04-10 21:17:17.398\r\n\tIP: 0.0.0.0 (0:23:15:5b:a6:60) &gt; 255.255.255.255 (ff:ff:ff:ff:ff:ff)\r\n\tOP: 1 (BOOTPREQUEST)\r\n HTYPE: 1 (Ethernet)\r\n  HLEN: 6\r\n  HOPS: 0\r\n   XID: 011d073a\r\n  SECS: 0\r\n FLAGS: 0\r\nCIADDR: 0.0.0.0\r\nYIADDR: 0.0.0.0\r\nSIADDR: 0.0.0.0\r\nGIADDR: 0.0.0.0\r\nCHADDR: 00:23:15:5b:a6:60:00:00:00:00:00:00:00:00:00:00\r\n SNAME: .\r\n FNAME: .\r\nOPTION:  53 (  1) DHCP message type         3 (DHCPREQUEST)\r\nOPTION:  50 (  4) Request IP address        192.168.1.5\r\nOPTION:  12 (  5) Host name                 x201i\r\nOPTION:  55 ( 17) Parameter Request List      1 (Subnet mask)\r\n\t\t\t\t\t\t\t\t\t\t\t 28 (Broadcast address)\r\n\t\t\t\t\t\t\t\t\t\t\t  2 (Time offset)\r\n\t\t\t\t\t\t\t\t\t\t\t  3 (Routers)\r\n\t\t\t\t\t\t\t\t\t\t\t 15 (Domainname)\r\n\t\t\t\t\t\t\t\t\t\t\t  6 (DNS server)\r\n\t\t\t\t\t\t\t\t\t\t\t119 (Domain Search)\r\n\t\t\t\t\t\t\t\t\t\t\t 12 (Host name)\r\n\t\t\t\t\t\t\t\t\t\t\t 44 (NetBIOS name server)\r\n\t\t\t\t\t\t\t\t\t\t\t 47 (NetBIOS scope)\r\n\t\t\t\t\t\t\t\t\t\t\t 26 (Interface MTU)\r\n\t\t\t\t\t\t\t\t\t\t\t121 (Classless Static Route)\r\n\t\t\t\t\t\t\t\t\t\t\t 42 (NTP servers)\r\n\t\t\t\t\t\t\t\t\t\t\t249 (MSFT - Classless route)\r\n\t\t\t\t\t\t\t\t\t\t\t 33 (Static route)\r\n\t\t\t\t\t\t\t\t\t\t\t252 (MSFT - WinSock Proxy Auto Detect)\r\n\t\t\t\t\t\t\t\t\t\t\t 17 (Root path)\r\n\r\n\r\n--------------------\r\n\r\n\r\n^C<\/pre>\n<\/div>\n<\/div>\n<p><iframe style=\"width:120px;height:240px;\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\" frameborder=\"0\" src=\"\/\/rcm-fe.amazon-adsystem.com\/e\/cm?lt1=_blank&#038;bc1=000000&#038;IS2=1&#038;bg1=FFFFFF&#038;fc1=000000&#038;lc1=0000FF&#038;t=matokensmeme-22&#038;language=ja_JP&#038;o=9&#038;p=8&#038;l=as4&#038;m=amazon&#038;f=ifr&#038;ref=as_ss_li_til&#038;asins=4873118441&#038;linkId=8ebe81447e5039087aa9b175d3577b4e\"><\/iframe><iframe style=\"width:120px;height:240px;\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\" frameborder=\"0\" src=\"\/\/rcm-fe.amazon-adsystem.com\/e\/cm?lt1=_blank&#038;bc1=000000&#038;IS2=1&#038;bg1=FFFFFF&#038;fc1=000000&#038;lc1=0000FF&#038;t=matokensmeme-22&#038;language=ja_JP&#038;o=9&#038;p=8&#038;l=as4&#038;m=amazon&#038;f=ifr&#038;ref=as_ss_li_til&#038;asins=B07JJKLZNW&#038;linkId=2af2bfca0cdd342fe0384e946acf5039\"><\/iframe><iframe style=\"width:120px;height:240px;\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\" frameborder=\"0\" src=\"\/\/rcm-fe.amazon-adsystem.com\/e\/cm?lt1=_blank&#038;bc1=000000&#038;IS2=1&#038;bg1=FFFFFF&#038;fc1=000000&#038;lc1=0000FF&#038;t=matokensmeme-22&#038;language=ja_JP&#038;o=9&#038;p=8&#038;l=as4&#038;m=amazon&#038;f=ifr&#038;ref=as_ss_li_til&#038;asins=4781702368&#038;linkId=1904e4ac69508b1af9c35d49210776f7\"><\/iframe><\/p>\n","protected":false},"excerpt":{"rendered":"<p>tcpdump\u306e\u5834\u5408 $ sudo tcpdump -i wlp3s0 port 67 or port 68 -e -n [sudo] password for matoken: tcpdump: verbose out [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"webmentions_disabled_pings":false,"webmentions_disabled":false,"activitypub_content_warning":"","activitypub_content_visibility":"","activitypub_max_image_attachments":4,"activitypub_interaction_policy_quote":"anyone","activitypub_status":"","footnotes":""},"categories":[7,6,199],"tags":[460,206,205],"class_list":["post-2374","post","type-post","status-publish","format-standard","hentry","category-debian-linux","category-linux","category-sid","tag-dhcp","tag-packet-capture","tag-tcpdump"],"_links":{"self":[{"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/posts\/2374","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/comments?post=2374"}],"version-history":[{"count":0,"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/posts\/2374\/revisions"}],"wp:attachment":[{"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/media?parent=2374"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/categories?post=2374"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/tags?post=2374"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}