When a DHCP client sends out a DHCPREQUEST and the DHCP
server(s) respond with a DHCPOFFER. BUT since this is based on broadcasts
this will only "show" DHCP server that are within the same broadcast segment.
(exception to that is when you have a DHCP/BOOTP relay agent which can forward
the request to a DHCP server in another segment too)
You would then need to be able to have a list of valid DHCP
servers and compare the responses you get to those that are within the
list. If there an answer from a server that is not within the list, there
is a "problem" (or better a new dhcp server).
That's the logic to follow, so all you have to do now is to
write an external check for this :-)
Good luck.
Dirk.
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tobie Fysh
Sent: Friday, January 21, 2005 11:29 AM
To: '[email protected]'
Subject: [SA-list] DHCP Errors
Hi
everybody,
Okay this is going
to sound like a laugh but last night one of our techs was playing about with a
build of a test server and installed a DHCP server onto it (Win2K3), he built it
onto different IP range so this morning some PC's decided to start looking at
this server instead of our normal one leading to problems all over the
place.
My question is - Can
SA check for new DHCP servers being added to the network? (We've got a rogue
department who install stuff as well as technicians who
do!!)
Regards,
Tobie Fysh
