User Tools

Site Tools


networking:dhcp_find_rogue

This is an old revision of the document!


Find a Rogue DHCP Server

DHCP Process

DORA

  1. Discover
  2. Offer
  3. Request
  4. Acknowledge

Capture the Process

  1. Note the IP address of valid DHCP server
  2. Start Wireshark
  3. ipconfig /release
  4. ipconfig /renew
  5. Save the capture
    • find_rogue.pcap
networking/dhcp_find_rogue.1532107811.txt.gz · Last modified: 2018/07/20 11:30 by gcooper