Diego swapped the card at 3:14 AM. The strange packets stopped. The server returned to its usual quiet hum. Leah put the old card in an ESD bag, labeled it “BNX2-09 / DO NOT ERASE,” and drove home.
But she couldn’t sleep. Three days later, in a clean lab, Leah attached the card to a sacrificial Debian 11 box. She didn’t load the standard firmware. Instead, she dumped the bnx2-mips-09-6.2.1b.fw image directly into a disassembler. bnx2 bnx2-mips-09-6.2.1b.fw debian 11
The MIPS binary was ancient. But nestled in a segment marked “reserved for factory diagnostics” was something impossible: a tiny, hand-coded state machine with no business existing inside a network firmware. It wasn’t part of the MAC, PHY, or PCIe logic. It was a trap . Diego swapped the card at 3:14 AM
