Date: Thu, 11 Apr 2002 14:56:56 -0400 From: Mike Fratto <mfratto@nwc.com> To: "mike ndabarasa" <freebsd@nur.ac.rw>, freebsd-questions@freebsd.org Subject: Re: dhcp question Message-ID: <5.1.0.14.2.20020411144553.02a9ec10@mail.nwc.com> In-Reply-To: <web-3090971@pumba.nur.ac.rw>
next in thread | previous in thread | raw e-mail | index | archive | help
At 06:23 PM 4/11/2002 +0000, mike ndabarasa wrote: >here is my question: >==================== >how do i know who in my network is making dhcp offers so >that i can recognize officials dhcp from un-officials. >i understant one way is to check running processes on every >machine but this may be a daunting task. >i want a tool that i may use from my desktop before i go >down to the identified troublemaker. One way to do that is to get the mac address of your "authorized" dhcp server and use that in TCPDUMP to capture all DHCP responses EXCEPT from your mac address. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5.1.0.14.2.20020411144553.02a9ec10>