Strange renew unicast - help needed

Nikolay P nikolay.p at cos.flag.org
Thu Jul 24 22:54:36 UTC 2014


----- "Peter Rathlev" <peter at rathlev.dk> wrote:

> Have you tried seeing what the client actually sends with e.g.
> tcpdump
> running at the time of renew? Just to make sure it's not some
> middlebox
> that clears CIADDR or something like that. Something that might
> normally
> insert option 82 or the like.
> 

Thank you Peter and Hunter.

The client is innocent. I used tcpdump and Wireshark to find that client generates valid unicast renew with CIADDR value set. So now I need to find what device modifies the request - Wi-Fi bridge or access point. To achieve this I need to sniff and decrypt Wi-Fi traffic.



> -- 
> Peter
> 
> _______________________________________________
> dhcp-users mailing list
> dhcp-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/dhcp-users


More information about the dhcp-users mailing list