Unicast dhcp replies to a relay agent are dropped when the ip is statically assigned in zone config. changing ip assignment to "dhcp" in zone config works around this issue.
within KVM guest requests and replies can be seen. Snooping the physical device in the global zone shows the requests but no replies.
this is with "dhcp_server" and "allow_dhcp_spoofing" enabled in the zone config.