Re: Rogue DHCP Server
From: Patrick Hallihan (rick_hallihan_N0$P_at_M_@hotmail.com)
Date: 05/20/03
- Next message: Michael A. Covington: "Re: More developments "You do not have permission to change your password""
- Previous message: Monticus: "getting rid of pop ups"
- In reply to: Mark Patterson: "Rogue DHCP Server"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 20 May 2003 15:33:09 -0400
Most (if not all) current releases of Windows include a basic DHCP server in
Internet Connection Sharing (ICS). ICS uses 192.168.0.0/24 by default, so
this should only be the case if that's the same as your network.
If you have "bad address" entries in your DHCP Scope's list of leases, I'd
start there. Can you ping the address? If you can, try doing an
nbtstat -A w.x.y.z (The A has to be capitolized, w.x.y.z is the ip address)
to track down the machine. If you can ping it, but it won't resolve with
nbtstat, type 'arp -a' to get the MAC address associated with the IP. It's
a painful process, but you can find the hardware manufacturer using the MAC.
If you can locate a machine with a bad address, do an "ipconfig /all" to
find out where it got the address.
If you can't track it down this way, there's a unix program called
dhcp_probe that will help. Search for it on google.
Regards,
Patrick Hallihan
MCSE,MCSA,MCDBA
"Mark Patterson" <markp@networksus.com> wrote in message
news:024f01c31ef7$1e165000$a301280a@phx.gbl...
> I am getting IP conflicts on our network server yet all
> workstations have DHCP enabled. There are no network
> printers. The only thing I can think of, is that there is
> a rogue DHCP Server on the network somewhere. However, I
> can't find it. I have tracked down six different
> workstations which the Server said was conflicting with
> it's IP (in event viewer). However, when I look at the
> workstations (all XP Pro), they are all pulling from the
> Windows 2000 Server DHCP (Small Business Server) and there
> IP address does not conflict with the Server. Does XP Pro
> have the ability to act as a DHCP Server natively? Any
> ideas on how to track a rogue DHCP Server?
- Next message: Michael A. Covington: "Re: More developments "You do not have permission to change your password""
- Previous message: Monticus: "getting rid of pop ups"
- In reply to: Mark Patterson: "Rogue DHCP Server"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
