>Plug in a computer with Ethereal to your network and start sniffing
>packets in promiscuous mode.  You can see the actual packet that the
>DHCP server is sending out.  I've been able to track down rogue DHCP
>servers by looking at the server IP address in the packet, which can
>then be tracked down to the computer/device responsible.

Yet another use for the awesomeness that is Knoppix STD.  It turns out that
it was a rogue router that I had turned to switching duties only.  A power
outage reset it and thus reactivated its DHCP server.  Thanks for the help.

Andrew




--------------------
BYU Unix Users Group 
http://uug.byu.edu/ 

The opinions expressed in this message are the responsibility of their
author.  They are not endorsed by BYU, the BYU CS Department or BYU-UUG. 
___________________________________________________________________
List Info: http://uug.byu.edu/cgi-bin/mailman/

Reply via email to