Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Bogus DHCP requests
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
Carnildo
Guru
Guru


Joined: 17 Jun 2004
Posts: 594

PostPosted: Wed Mar 14, 2012 3:19 am    Post subject: Bogus DHCP requests Reply with quote

Every ten minutes, I get a set of entries like the following in my router's log:

Code:
Mar 14 02:56:20 router dhcpd: DHCPREQUEST for 0.0.0.0 from 00:00:00:00:00:00 via br0: wrong network.
Mar 14 02:56:20 router dhcpd: DHCPNAK on 0.0.0.0 to 00:00:00:00:00:00 via br0
Mar 14 02:56:20 router dhcpd: DHCPRELEASE of 0.0.0.0 from 00:00:00:00:00:00 via br0 (not found)


All of the machines currently connected to my network, with the exception of the router itself, use static addresses. The router's DHCP client should only be active on one Ethernet port (the "outside" port connected to my modem). How can I track down where these requests are coming from?
Back to top
View user's profile Send private message
Kaso_da_Zmok
Apprentice
Apprentice


Joined: 19 Aug 2004
Posts: 189
Location: Zurich, Switzerland

PostPosted: Wed Mar 14, 2012 9:34 am    Post subject: Reply with quote

Code:
# tcpdump -lenx -i eth0 -s 1500 port bootps or port bootpc


and

Code:
dhcpdump -i eth0
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum