Unwanted DHCP Clients Requests ISC-DHCP-SERVER

[Sten Carlsen]

On 17/05/13 18:03, Prabhpal S. Mavi wrote:
> Dear DHCP Gurus
>
> i have full of log with unwanted dhcp client requests that i don't suppose
> to receive. i applied following solution but did not help. anyone have
> idea to stop them ?
>
>
> subnet 192.168.3.0 netmask 255.255.255.0 {
> range 192.168.3.100;
Note this range has ONE address. And it is not the one in your log below.
> ignore booting;
> }
> subnet 192.168.4.0 netmask 255.255.255.0 {
> range 192.168.4.100;
Note this range has ONE address.
> ignore booting;
> }
>
>
> i have thousands of this requests.
You may try to chase down the NIC with MAC - 00:16:44:63:4b:e1to see
what it is and what is wrong with it.
If this is not the only one, you may look for a rogue DHCP server or as
mentioned by Steven a leak in your networks.

Whatever it is, you need to fix it in the network.
>
> May 17 15:58:18 captive dhcpd: DHCPREQUEST for 192.168.4.235
> (192.168.3.133) from 00:16:44:63:4b:e1 via eth0: wrong network.
> May 17 15:58:18 captive dhcpd: DHCPNAK on 192.168.4.235 to
> 00:16:44:63:4b:e1 via eth0
> May 17 15:58:21 captive dhcpd: DHCPREQUEST for 192.168.4.235
> (192.168.3.133) from 00:16:44:63:4b:e1 via eth0: wrong network.
> May 17 15:58:21 captive dhcpd: DHCPNAK on 192.168.4.235 to
> 00:16:44:63:4b:e1 via eth0
> May 17 15:58:22 captive dhcpd: DHCPREQUEST for 192.168.4.235
> (192.168.3.133) from 00:16:44:63:4b:e1 via eth0: wrong network.
> May 17 15:58:22 captive dhcpd: DHCPNAK on 192.168.4.235 to
> 00:16:44:63:4b:e1 via eth0
> May 17 15:58:22 captive dhcpd: DHCPREQUEST for 192.168.4.235
> (192.168.3.133) from 00:16:44:63:4b:e1 via eth0: wrong network.
> May 17 15:58:22 captive dhcpd: DHCPNAK on 192.168.4.235 to
> 00:16:44:63:4b:e1 via eth0
> May 17 15:58:23 captive dhcpd: DHCPREQUEST for 192.168.4.235
> (192.168.3.133) from 00:16:44:63:4b:e1 via eth0: wrong network.
> May 17 15:58:23 captive dhcpd: DHCPNAK on 192.168.4.235 to
> 00:16:44:63:4b:e1 via eth0
> May 17 15:58:26 captive dhcpd: DHCPREQUEST for 192.168.4.235
> (192.168.3.133) from 00:16:44:63:4b:e1 via eth0: wrong network.
> May 17 15:58:26 captive dhcpd: DHCPNAK on 192.168.4.235 to
> 00:16:44:63:4b:e1 via eth0
> May 17 15:58:26 captive dhcpd: DHCPREQUEST for 192.168.4.235
> (192.168.3.133) from 00:16:44:63:4b:e1 via eth0: wrong network.
> May 17 15:58:26 captive dhcpd: DHCPNAK on 192.168.4.235 to
> 00:16:44:63:4b:e1 via eth0
> May 17 15:58:29 captive dhcpd: DHCPREQUEST for 192.168.4.235
> (192.168.3.133) from 00:16:44:63:4b:e1 via eth0: wrong network.
> May 17 15:58:29 captive dhcpd: DHCPNAK on 192.168.4.235 to
> 00:16:44:63:4b:e1 via eth0
> May 17 15:58:59 captive dhcpd: DHCPREQUEST for 192.168.4.87 from
> 7c:11:be:63:32:d2 via eth0: wrong network.
> May 17 15:58:59 captive dhcpd: DHCPNAK on 192.168.4.87 to
> 7c:11:be:63:32:d2 via eth0
> May 17 15:59:01 captive dhcpd: DHCPREQUEST for 192.168.4.87
> (192.168.3.133) from 7c:11:be:63:32:d2 via eth0: wrong network.
> May 17 15:59:01 captive dhcpd: DHCPNAK on 192.168.4.87 to
> 7c:11:be:63:32:d2 via eth0
> May 17 15:59:26 captive dhcpd: DHCPREQUEST for 192.168.4.235
> (192.168.3.133) from 00:16:44:63:4b:e1 via eth0: wrong network.
> May 17 15:59:26 captive dhcpd: DHCPNAK on 192.168.4.235 to
> 00:16:44:63:4b:e1 via eth0
> May 17 15:59:32 captive dhcpd: DHCPINFORM from 192.168.4.235 via eth0
> May 17 15:59:32 captive dhcpd: DHCPACK to 192.168.4.235
> (00:16:44:63:4b:e1) via eth0
>
> Thanks
>
>
>
>
>
> _______________________________________________
> dhcp-users mailing list
> dhcp-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/dhcp-users

-- 
Best regards

Sten Carlsen

No improvements come from shouting:

       "MALE BOVINE MANURE!!!" 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/dhcp-users/attachments/20130517/64238163/attachment.html>