[Kea-users] log the dhcp options the client requests

[Victoria Risk]

For fingerprinting, don’t you also need to know the order in which the options are requested?

> On Aug 22, 2019, at 5:10 AM, Munroe Sollog <mus3 at lehigh.edu> wrote:
> 
> We currently use the dhcp options a client requests to fingerprint the device. 
> 
> On Thu, Aug 22, 2019 at 7:54 AM Tomek Mrugalski <tomasz at isc.org <mailto:tomasz at isc.org>> wrote:
> On 22.08.2019 13:16, Munroe Sollog wrote:
> > Just a bump to see if any progress has been made in allowing servers
> > to log the options a client requests.
> Thanks for bringing this up. That's interesting and a bit dangerous
> request, especially if misconfigured.
> 
> What exactly would you like to see in the log? Content of PRL or ORO
> options, i.e. a list of options being requested or the actual content of
> all options the client sent in its messages?
> 
> Take a look at the loggers we currently have:
> https://kea.readthedocs.io/en/latest/arm/logging.html#the-name-string-logger <https://kea.readthedocs.io/en/latest/arm/logging.html#the-name-string-logger>
> 
> In particular, you may look at kea-dhcp{4,6}.packets. If you're trying
> to debug a client that his packets are rejects,
> kea-dhcp{4,6}.bad-packets is something to look at. Also, there's
> kea-dhcp4.options logger.
> 
> If none of those work for you, can you open an issue in gitlab?
> https://gitlab.isc.org/isc-projects/kea/issues <https://gitlab.isc.org/isc-projects/kea/issues>
> 
> Thanks,
> 
> Tomek
> _______________________________________________
> Kea-users mailing list
> Kea-users at lists.isc.org <mailto:Kea-users at lists.isc.org>
> https://lists.isc.org/mailman/listinfo/kea-users <https://lists.isc.org/mailman/listinfo/kea-users>
> -- 
> Munroe Sollog
> Senior Network Engineer
> munroe at lehigh.edu <mailto:munroe at lehigh.edu>_______________________________________________
> Kea-users mailing list
> Kea-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/kea-users

Victoria Risk
Product Manager
Internet Systems Consortium
vicky at isc.org





-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/kea-users/attachments/20190822/fd559b1a/attachment.htm>