@
infinet 我也搞不懂，只能暂时再观察下，内网实在没有这种机器了，抓包看了下也不是很懂。
Frame 2: 314 bytes on wire (2512 bits), 314 bytes captured (2512 bits) on interface \Device\NPF_{E5D10228-16CC-4B04-9F8B-5611DC6D238B}, id 0
Section number: 1
Interface id: 0 (\Device\NPF_{E5D10228-16CC-4B04-9F8B-5611DC6D238B})
Encapsulation type: Ethernet (1)
Arrival Time: Jun 18, 2024 22:57:34.085063000 中国标准时间
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1718722654.085063000 seconds
[Time delta from previous captured frame: 0.000749000 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 0.000749000 seconds]
Frame Number: 2
Frame Length: 314 bytes (2512 bits)
Capture Length: 314 bytes (2512 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ethertype:ip:udp:dhcp]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: 00:ff:e6:d1:02:28 (00:ff:e6:d1:02:28), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Destination: Broadcast (ff:ff:ff:ff:ff:ff)
Source: 00:ff:e6:d1:02:28 (00:ff:e6:d1:02:28)
Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.1.254, Dst: 255.255.255.255
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
Total Length: 300
Identification: 0x0000 (0)
000. .... = Flags: 0x0
...0 0000 0000 0000 = Fragment Offset: 0
Time to Live: 16
Protocol: UDP (17)
Header Checksum: 0xe71b [validation disabled]
[Header checksum status: Unverified]
Source Address: 192.168.1.254
Destination Address: 255.255.255.255
User Datagram Protocol, Src Port: 67, Dst Port: 68
Source Port: 67
Destination Port: 68
Length: 280
Checksum: 0xc2c7 [unverified]
[Checksum Status: Unverified]
[Stream index: 1]
[Timestamps]
UDP payload (272 bytes)
Dynamic Host Configuration Protocol (Offer)
Message type: Boot Reply (2)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0x24d6d8f2
Seconds elapsed: 0
Bootp flags: 0x0000 (Unicast)
Client IP address: 0.0.0.0
Your (client) IP address: 192.168.1.102
Next server IP address: 192.168.1.254
Relay agent IP address: 0.0.0.0
Client MAC address: 00:ff:e5:d1:02:28 (00:ff:e5:d1:02:28)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP
Option: (53) DHCP Message Type (Offer)
Length: 1
DHCP: Offer (2)
Option: (54) DHCP Server Identifier (192.168.1.254)
Option: (51) IP Address Lease Time
Length: 4
IP Address Lease Time: (31536000s) 365 days
Option: (1) Subnet Mask (255.255.255.0)
Length: 4
Subnet Mask: 255.255.255.0
Option: (15) Domain Name
Length: 2
Domain Name: 3G
Option: (6) Domain Name Server
Length: 4
Domain Name Server: 192.168.1.10
Option: (255) End
下面这个是另一个我觉得跟这个问题相关的包
Frame 657: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface \Device\NPF_{10FB3DBC-1CF5-41F2-8653-8C8FF89365B8}, id 0
Section number: 1
Interface id: 0 (\Device\NPF_{10FB3DBC-1CF5-41F2-8653-8C8FF89365B8})
Interface name: \Device\NPF_{10FB3DBC-1CF5-41F2-8653-8C8FF89365B8}
Interface description: WLAN 2
Encapsulation type: Ethernet (1)
Arrival Time: Aug 24, 2025 12:54:20.430748000 中国标准时间
UTC Arrival Time: Aug 24, 2025 04:54:20.430748000 UTC
Epoch Arrival Time: 1756011260.430748000
[Time shift for this packet: 0.000000000 seconds]
[Time delta from previous captured frame: 0.011937000 seconds]
[Time delta from previous displayed frame: 0.011937000 seconds]
[Time since reference or first frame: 16.853005000 seconds]
Frame Number: 657
Frame Length: 60 bytes (480 bits)
Capture Length: 60 bytes (480 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ethertype:arp]
[Coloring Rule Name: ARP]
[Coloring Rule String: arp]
Ethernet II, Src: 00:ae:4f:44:87:0f (00:ae:4f:44:87:0f), Dst: CloudNetwork_e5:14:c3 (4c:82:a9:e5:14:c3)
Destination: CloudNetwork_e5:14:c3 (4c:82:a9:e5:14:c3)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: 00:ae:4f:44:87:0f (00:ae:4f:44:87:0f)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: ARP (0x0806)
[Stream index: 5]
Padding: 000000000000000000000000000000000000
Address Resolution Protocol (request)
Hardware type: Ethernet (1)
Protocol type: IPv4 (0x0800)
Hardware size: 6
Protocol size: 4
Opcode: request (1)
Sender MAC address: 00:ae:4f:44:87:0f (00:ae:4f:44:87:0f)
Sender IP address: 172.31.80.69
Target MAC address: 00:00:00_00:00:00 (00:00:00:00:00:00)
Target IP address: 192.168.1.102
我的设备刚刚被分配到 192.168.1.102 这个非法地址，而且我也不清楚 172.31.80.69 这个 ip 是什么，看起来像运营商设备 ip