From Syslinux Wiki
Revision as of 02:23, 5 July 2013 by GeneC (talk | contribs) (PXE-Capture-tftpd: tcpdump sample)

Jump to: navigation, search


Please note, this page is under development at the moment and may be incomplete or possibly use incorrect terminology


When users encounter issues, there are a number of steps that can be taken to collect information surrounding the issue. Steps here should contain no compiling.

First Steps

Check over Hardware Compatibility, Common Problems and the latest NEWS file to see if your issue might be known/resolved/have a workaround.


PXE-specific notes


Using a port mirror in an intelligent switch is the most effective way of capturing the traffic to/from a PXE client.

Once a mirror of the PXE client's port is configured, the capture interface on the machine doing the capture should be as silent as possible to prevent unwanted packets from being captured.


For a PXE client that can successfully use DHCP to identify the characteristics it should use (including the server and filename to boot), capturing traffic from the machine running the tftpd is pretty effective. Most tftpds will move to another port for the actual data transmission but the PXE client's IP should be in all of the applicable traffic. Filtering to just packets with that IP will likely suffice.

Using wireshark with a capture filter of 'host' (assuming is the PXE client) will generally capture all relevant packets and no irrelevant packets.

An example tcpdump command: `tcpdump -i eth0 -w dump.cap 'host'`