Two offers in response to one discovery

Simon Hobson dhcp1 at
Wed Dec 14 15:51:03 UTC 2011

John Miller wrote:

>What I am seeing in a pcap is the WindowsXP client, after a 
>release/renew, send the discovery and the server responding with 2 
>offers of 2 different IP addresses. First question is does this seem 
>to be any kind of normal behavior? Second question is what 
>additional information do I need to provide to help resolve this 

This can happen is there are two paths for a request to reach the 
server - eg two routers on redundant paths both acting as relays. 
However, in that case, you should see the same IP address in the two 
Alternatively, someone has setup a rogue server.

You would want to examine the contents of the offer packets, and see 
what the Server ID field holds.
Simon Hobson

Visit for books by acclaimed
author Gladys Hobson. Novels - poetry - short stories - ideal as
Christmas stocking fillers. Some available as e-books.

More information about the dhcp-users mailing list