MAC/machine-name mismatch

Ray Phillips r.phillips at jkmrc.com
Tue Jul 10 00:34:56 UTC 2007


This seems crazy, but I thought I'd report an instance when a 
MAC/machine-name mismatch appeared in the log file of the primary in 
our failover pair.  Both primary and secondary were running version 
3.1.0rc1 at the time (I upgraded them to rc2 over the weekend).

TruemanLT-PC's MAC is 00:00:39:2f:b9:3f, not 00:19:d1:82:7a:17.

primary's /var/log/dhdpd entries
--------------------------------
Jul  6 18:32:51 proxy0 dhcpd: DHCPDISCOVER from 00:19:d1:82:7a:17 via ex0: load
balance to peer foo
Jul  6 18:32:51 proxy0 dhcpd: DHCPREQUEST for 192.168.37.132 
(192.168.36.24) fro
m 00:19:d1:82:7a:17 (TruemanLT-PC) via ex0: lease owned by peer

secondary's /var/log/dhdpd entries
----------------------------------
Jul  6 18:32:50 ns3 dhcpd: DHCPDISCOVER from 00:19:d1:82:7a:17 via ep0
Jul  6 18:32:51 ns3 dhcpd: DHCPOFFER on 192.168.37.132 to 00:19:d1:82:7a:17 via
ep0
Jul  6 18:32:51 ns3 dhcpd: 00:19:d1:82:7a:17 believed to be 
NetBSD/TiVo Series 2
  - no vendor-id
Jul  6 18:32:51 ns3 dhcpd: Added new forward map from 
nn-82-7a-17.jkmrc.uq.edu.a
u to 192.168.37.132
Jul  6 18:32:51 ns3 dhcpd: added reverse map from 
132.37.168.192.in-addr.arpa. t
o nn-82-7a-17.jkmrc.uq.edu.au
Jul  6 18:32:51 ns3 dhcpd: DHCPREQUEST for 192.168.37.132 
(192.168.36.24) from 0
0:19:d1:82:7a:17 via ep0
Jul  6 18:32:51 ns3 dhcpd: DHCPACK on 192.168.37.132 to 
00:19:d1:82:7a:17 via ep
0

These are the only entries in both log files at the time Jul  6 18:32:5x

This is a normal entry for the  machine named TruemanLT-PC:

primary's /var/log/dhdpd entries
--------------------------------
Jul  4 15:06:51 proxy0 dhcpd: 00:00:39:2f:b9:3f believed to be 
Microsoft Windows
  XP - MSFT 5.0
Jul  4 15:06:51 proxy0 dhcpd: Wrote 0 class decls to leases file.
Jul  4 15:06:51 proxy0 dhcpd: Wrote 0 deleted host decls to leases file.
Jul  4 15:06:51 proxy0 dhcpd: Wrote 0 new dynamic host decls to leases file.
Jul  4 15:06:51 proxy0 dhcpd: Wrote 473 leases to leases file.
Jul  4 15:06:51 proxy0 dhcpd: DHCPREQUEST for 192.168.37.246 from 
00:00:39:2f:b9
:3f (TruemanLT-PC) via ex0
Jul  4 15:06:51 proxy0 dhcpd: DHCPACK on 192.168.37.246 to 
00:00:39:2f:b9:3f (Tr
uemanLT-PC) via ex0

secondary's /var/log/dhdpd entries
----------------------------------
Jul  4 15:06:51 ns3 dhcpd: 00:00:39:2f:b9:3f believed to be Microsoft 
Windows XP
  - MSFT 5.0
Jul  4 15:06:51 ns3 dhcpd: Wrote 0 class decls to leases file.
Jul  4 15:06:51 ns3 dhcpd: Wrote 0 deleted host decls to leases file.
Jul  4 15:06:51 ns3 dhcpd: Wrote 0 new dynamic host decls to leases file.
Jul  4 15:06:51 ns3 dhcpd: Wrote 473 leases to leases file.
Jul  4 15:06:51 ns3 dhcpd: DHCPREQUEST for 192.168.37.246 from 
00:00:39:2f:b9:3f
  (TruemanLT-PC) via ep0
Jul  4 15:06:51 ns3 dhcpd: DHCPACK on 192.168.37.246 to 
00:00:39:2f:b9:3f (Truem
anLT-PC) via ep0

TruemanLT-PC's owner isn't capable of spoofing a MAC address.


Ray


More information about the dhcp-users mailing list