Re: [Ethereal-users] DHCP requests

[Andrew Hood <ajhood@xxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ron Gallimore wrote:
| I need to create a filter that shows what ip address is assigned from my
| DHCP server to the client.  I think I have a bad NIC somewhere but I do
| not know where.  I know I can use the DHCP snap-in in W2K to view the
| address leases but it will not tell me how many times a NIC has
| requested an MAC address.
|
| The reason I am doing this is my DHCP server is filling up with bad
| addresses.  The Client IP Address and the Name shown in my Address
| Leases snap-in show the exact same thing for the bad addresses.  The
| unique ID in my snap-in is also too long to me a NIC, 23 characters.

It would not surprise me if the first bytes of the MAC were 52:41:53:20
(or xx:52:41:53:20 if it has a media-type byte).

That's a RAS server requesting addresses for clients - whether it has
any or not.

I have the following in the config for ISC DHCP

if (substring (option dhcp-client-identifier, 1, 4) = "RAS ") {
~  ignore booting;
}

- --
There's no point in being grown up if you can't be childish sometimes.
~                -- Dr. Who
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFA5T2wUpRmj8xnsFgRAj56AJ99lOpQ2MPz8EzHccUyZicUke2j5ACfe3rn
XqLx4qdZt4N+srh5Li8LX38=
=TwqX
-----END PGP SIGNATURE-----