[Kea-users] Logging Option 82 Circuit-id and Remote-id.

[Jason Creviston]

We're using the legal log hook:
"hooks-libraries": [
    {
        "library": "/usr/lib/x86_64-linux-gnu/kea/hooks/libdhcp_legal_log.so"
    },
]

Then, in /var/log/kea/kea-legal.<YYYYMMDD>.log, we see the circuit/remote id info:

2025-10-30 23:59:49 UTC Address: REDACTED has been assigned for 1 days 0 hrs 0 mins 0 secs to a device with hardware address: hwtype=1 REDACTED connected via relay at address: REDACTED, identified by circuit-id: REDACTED (REDACTED) and remote-id: REDACTED (REDACTED), context: { "ISC": { "client-classes": [ REDACTED ] } }


We gave the IPv6 side a different name (or maybe the docs say to do this, idr):
"hooks-libraries": [
    {
        "library": "/usr/lib/x86_64-linux-gnu/kea/hooks/libdhcp_legal_log.so",
        "parameters": {
            "base-name": "kea-forensic6"
        }
    },
]


Thanks,



Jason Creviston
Sr. Network Administrator

P: 765-795-9305               2 S. West Street – P.O. Box 237, Cloverdale, IN 46120
Book an appointment with me!<https://outlook.office365.com/owa/calendar/JasonCreviston@weendeavor.com/bookings/>

[cid:codetwo-signature-logo-endeavor_1c9b8f6f-f797-4b22-a7d8-b9c8f1b0c327.png]  [cid:codetwo-gigtel-logo2_e109b7e4-b185-40fc-94f2-947f96c612cf.png]         [cid:endeavor-it-signature-2_cad37e9b-ad7b-4219-a677-f37914c8d32a.png]

weEndeavor.com<http://weendeavor.com/>  GigTel.com<http://gigtel.com/>     EndeavorIT.com<http://EndeavorIT.com>

CONFIDENTIALITY NOTICE: The information in this Email and my attachments are confidential and may be privileged. This Email is intended solely for the named recipient or recipients. If you are not the intended recipient, any use, disclosure, copying or distribution of this Email is prohibited. If you are not the intended recipient, please inform us by replying with the subject line "Wrong Address" and then delete this Email and any attachments. Endeavor Communications uses regularly updated anti-virus software in an attempt to reduce the possibility of transmitting computer viruses. We do not guarantee, however, that any attachments to this Email are virus-free.
________________________________
From: Kea-users <kea-users-bounces at lists.isc.org> on behalf of Tim Nowaczyk <tnowaczyk at hostedbackbone.net>
Sent: Wednesday, November 19, 2025 10:56 AM
To: Kea user's list <kea-users at lists.isc.org>
Subject: [Kea-users] Logging Option 82 Circuit-id and Remote-id.


CAUTION: This email is from OUTSIDE our organization. Please do not open/download any attachment or click any link unless you know it's safe.

Hello,

I have a requirement where Ineed to log the details from the DHCP Option-82 field whenever a lease is allocated so that we can go back and see which customer was using a particular IP at a given time. The current output of the DHCP4_LEASE_ALLOC message just contains a mapping between MAC address and IP address. Is there a different logging logger name we should be logging that would contain these details? Does anyone have any suggestions on how we can accomplish this?

2025-11-19 15:44:13.438 INFO  [kea-dhcp4.leases/160072.131853078283968] DHCP4_LEASE_ALLOC [hwtype=1 00:11:22:33:44:55], cid=[no info], tid=0xdb58de5a: lease 198.51.100.2 has been allocated for 300 seconds

We are running Kea 3.0.2

Thanks,
Tim Nowaczyk

-- ‎
[cid:94911826-095f-4d86-90eb-98d8edf7a718]

Tim Nowaczyk

​​​​

Director of Networking

,

Hosted Backbone, LLC






m: (608) 772-1766<tel:+16087721766>



e: tnowaczyk at hostedbackbone.net<mailto:tnowaczyk at hostedbackbone.net>

 |

w: www.hostedbackbone.net<https://www.hostedbackbone.net/>




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/kea-users/attachments/20251119/95985df4/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Outlook-twq3qrnd.png
Type: image/png
Size: 32838 bytes
Desc: Outlook-twq3qrnd.png
URL: <https://lists.isc.org/pipermail/kea-users/attachments/20251119/95985df4/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: codetwo-signature-logo-endeavor_1c9b8f6f-f797-4b22-a7d8-b9c8f1b0c327.png
Type: image/png
Size: 1897 bytes
Desc: codetwo-signature-logo-endeavor_1c9b8f6f-f797-4b22-a7d8-b9c8f1b0c327.png
URL: <https://lists.isc.org/pipermail/kea-users/attachments/20251119/95985df4/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: codetwo-gigtel-logo2_e109b7e4-b185-40fc-94f2-947f96c612cf.png
Type: image/png
Size: 1039 bytes
Desc: codetwo-gigtel-logo2_e109b7e4-b185-40fc-94f2-947f96c612cf.png
URL: <https://lists.isc.org/pipermail/kea-users/attachments/20251119/95985df4/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: endeavor-it-signature-2_cad37e9b-ad7b-4219-a677-f37914c8d32a.png
Type: image/png
Size: 1214 bytes
Desc: endeavor-it-signature-2_cad37e9b-ad7b-4219-a677-f37914c8d32a.png
URL: <https://lists.isc.org/pipermail/kea-users/attachments/20251119/95985df4/attachment-0007.png>