Leaked source code of windows server 2003
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

43 lines
1.8 KiB

  1. dhcploc:
  2. This utility can be used to detect unauthorized DHCP server on a subnet.
  3. It displays the dhcp servers that are active on the subnet and beeps and
  4. sends out alert messages when it sees from any unauthorized dhcp
  5. servers. The usage of this tool is as given below :
  6. dhcploc [-p] [-a:"list-of-alertnames"] [-i:alertinterval] machine-ip-address [list of valid dhcp servers ip addresses]
  7. machine-ip-address - ip address of the machine where the utility is
  8. run. If the machine has multiple adapters then you need to select an
  9. adapter (and the corresponding ip address) that is connected to the
  10. subnet under test.
  11. list of valid dhcp servers - you can specify any number of authorized
  12. dhcp servers' ip addresses here. This utility will be silent if it sees any
  13. packets from these server. However it will display the packets it sees
  14. from these servers unless '-p' option is specified.
  15. -p - if this option is specified then this utility will not display the
  16. packets it sees from the specified authorized dhcp servers.
  17. -a - if this option is specified the tool sends of alert message to
  18. the list of names specified.
  19. -i - this option specifies the alert frequency in seconds.
  20. The format of the output will look like as below :
  21. <time> (IP)<ipaddress offered> <packet type> (S)<server ip address> <***>
  22. *** - indicates unauthorized server.
  23. Examples :
  24. 17:34:58 (IP)0.0.0.0 NACK (S)11.11.31.84 ***
  25. 17:36:38 (IP)11.101.190.130 OFFER (S)11.101.12.226 ***
  26. 17:36:38 (IP)11.101.196.231 ACK (S)11.101.13.53
  27. 17:36:53 (IP)11.101.196.231 ACK (S)11.101.13.53
  28. 17:37:05 (IP)11.101.196.234 OFFER (S)11.101.13.53
  29. 17:37:05 (IP)11.101.193.232 OFFER (S)11.101.12.198
  30. 17:37:06 (IP)11.101.190.132 OFFER (S)11.101.12.226 ***