Strange renew unicast - help needed
Nikolay P
nikolay.p at cos.flag.org
Thu Jul 24 22:54:36 UTC 2014
----- "Peter Rathlev" <peter at rathlev.dk> wrote:
> Have you tried seeing what the client actually sends with e.g.
> tcpdump
> running at the time of renew? Just to make sure it's not some
> middlebox
> that clears CIADDR or something like that. Something that might
> normally
> insert option 82 or the like.
>
Thank you Peter and Hunter.
The client is innocent. I used tcpdump and Wireshark to find that client generates valid unicast renew with CIADDR value set. So now I need to find what device modifies the request - Wi-Fi bridge or access point. To achieve this I need to sniff and decrypt Wi-Fi traffic.
> --
> Peter
>
> _______________________________________________
> dhcp-users mailing list
> dhcp-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/dhcp-users
More information about the dhcp-users
mailing list