[Kea-users] log the dhcp options the client requests

Munroe Sollog mus3 at lehigh.edu
Thu Aug 22 17:48:33 UTC 2019


Yes, that is correct.

On Thu, Aug 22, 2019 at 11:54 AM Victoria Risk <vicky at isc.org> wrote:

> For fingerprinting, don’t you also need to know the order in which the
> options are requested?
>
> On Aug 22, 2019, at 5:10 AM, Munroe Sollog <mus3 at lehigh.edu> wrote:
>
> We currently use the dhcp options a client requests to fingerprint the
> device.
>
> On Thu, Aug 22, 2019 at 7:54 AM Tomek Mrugalski <tomasz at isc.org> wrote:
>
>> On 22.08.2019 13:16, Munroe Sollog wrote:
>> > Just a bump to see if any progress has been made in allowing servers
>> > to log the options a client requests.
>> Thanks for bringing this up. That's interesting and a bit dangerous
>> request, especially if misconfigured.
>>
>> What exactly would you like to see in the log? Content of PRL or ORO
>> options, i.e. a list of options being requested or the actual content of
>> all options the client sent in its messages?
>>
>> Take a look at the loggers we currently have:
>>
>> https://kea.readthedocs.io/en/latest/arm/logging.html#the-name-string-logger
>>
>> In particular, you may look at kea-dhcp{4,6}.packets. If you're trying
>> to debug a client that his packets are rejects,
>> kea-dhcp{4,6}.bad-packets is something to look at. Also, there's
>> kea-dhcp4.options logger.
>>
>> If none of those work for you, can you open an issue in gitlab?
>> https://gitlab.isc.org/isc-projects/kea/issues
>>
>> Thanks,
>>
>> Tomek
>> _______________________________________________
>> Kea-users mailing list
>> Kea-users at lists.isc.org
>> https://lists.isc.org/mailman/listinfo/kea-users
>>
> --
> Munroe Sollog
> Senior Network Engineer
> munroe at lehigh.edu
> _______________________________________________
> Kea-users mailing list
> Kea-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/kea-users
>
>
> Victoria Risk
> Product Manager
> Internet Systems Consortium
> vicky at isc.org
>
>
>
>
>
>

-- 
Munroe Sollog
Senior Network Engineer
munroe at lehigh.edu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/kea-users/attachments/20190822/002f3540/attachment.htm>


More information about the Kea-users mailing list