We're using the legal log hook:
"hooks-libraries": [
{
"library": "/usr/lib/x86_64-linux-gnu/kea/hooks/libdhcp_legal_log.so"
},
]
Then, in /var/log/kea/kea-legal.<YYYYMMDD>.log, we see the circuit/remote id
info:
2025-10-30 23:59:49 UTC Address: REDACTED has been assigned for 1 days 0 hrs 0
mins 0 secs to a device with hardware address: hwtype=1 REDACTED connected via
relay at address: REDACTED, identified by circuit-id: REDACTED (REDACTED) and
remote-id: REDACTED (REDACTED), context: { "ISC": { "client-classes": [
REDACTED ] } }
We gave the IPv6 side a different name (or maybe the docs say to do this, idr):
"hooks-libraries": [
{
"library": "/usr/lib/x86_64-linux-gnu/kea/hooks/libdhcp_legal_log.so",
"parameters": {
"base-name": "kea-forensic6"
}
},
]
Thanks,
Jason Creviston
Sr. Network Administrator
P: 765-795-9305 2 S. West Street – P.O. Box 237, Cloverdale, IN
46120
Book an appointment with
me!<https://outlook.office365.com/owa/calendar/[email protected]/bookings/>
[cid:codetwo-signature-logo-endeavor_1c9b8f6f-f797-4b22-a7d8-b9c8f1b0c327.png]
[cid:codetwo-gigtel-logo2_e109b7e4-b185-40fc-94f2-947f96c612cf.png]
[cid:endeavor-it-signature-2_cad37e9b-ad7b-4219-a677-f37914c8d32a.png]
weEndeavor.com<http://weendeavor.com/> GigTel.com<http://gigtel.com/>
EndeavorIT.com<http://EndeavorIT.com>
CONFIDENTIALITY NOTICE: The information in this Email and my attachments are
confidential and may be privileged. This Email is intended solely for the named
recipient or recipients. If you are not the intended recipient, any use,
disclosure, copying or distribution of this Email is prohibited. If you are not
the intended recipient, please inform us by replying with the subject line
"Wrong Address" and then delete this Email and any attachments. Endeavor
Communications uses regularly updated anti-virus software in an attempt to
reduce the possibility of transmitting computer viruses. We do not guarantee,
however, that any attachments to this Email are virus-free.
________________________________
From: Kea-users <[email protected]> on behalf of Tim Nowaczyk
<[email protected]>
Sent: Wednesday, November 19, 2025 10:56 AM
To: Kea user's list <[email protected]>
Subject: [Kea-users] Logging Option 82 Circuit-id and Remote-id.
CAUTION: This email is from OUTSIDE our organization. Please do not
open/download any attachment or click any link unless you know it's safe.
Hello,
I have a requirement where Ineed to log the details from the DHCP Option-82
field whenever a lease is allocated so that we can go back and see which
customer was using a particular IP at a given time. The current output of the
DHCP4_LEASE_ALLOC message just contains a mapping between MAC address and IP
address. Is there a different logging logger name we should be logging that
would contain these details? Does anyone have any suggestions on how we can
accomplish this?
2025-11-19 15:44:13.438 INFO [kea-dhcp4.leases/160072.131853078283968]
DHCP4_LEASE_ALLOC [hwtype=1 00:11:22:33:44:55], cid=[no info], tid=0xdb58de5a:
lease 198.51.100.2 has been allocated for 300 seconds
We are running Kea 3.0.2
Thanks,
Tim Nowaczyk
--
[cid:94911826-095f-4d86-90eb-98d8edf7a718]
Tim Nowaczyk
Director of Networking
,
Hosted Backbone, LLC
m: (608) 772-1766<tel:+16087721766>
e: [email protected]<mailto:[email protected]>
|
w: www.hostedbackbone.net<https://www.hostedbackbone.net/>
--
ISC funds the development of this software with paid support subscriptions.
Contact us at https://www.isc.org/contact/ for more information.
To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.
[email protected]
