| Lee H. Marzke on 28 Sep 2011 15:18:31 -0700 |
[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]
| Re: [PLUG] crazy DHCP server log entries |
Maybe this:
http://www.isc.org/files/auth.html
Lee
----- Original Message -----
> From: "Eric at Lucii.org" <eric@lucii.org>
> To: "Philadelphia Linux User's Group Discussion List" <plug@lists.phillylinux.org>
> Sent: Sunday, 4 September, 2011 12:30:02 PM
> Subject: [PLUG] crazy DHCP server log entries
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> My laptop (named: "neptune" - runs Ubuntu Maverick) is connected via
> Ethernet
> AND wireless to my LAN.
>
> When I look at the logs on the server (where DHCP is served from) I
> see two
> distinct patterns that *might* be problems.
>
> 1. REPEATED REQUESTS: There are hundreds of entries like this from
> the wireless:
>
> Sep 4 09:30:49 polaris dhcpd: DHCPREQUEST for 10.10.10.13 from
> 00:1e:4c:a1:85:92 via eth0
> Sep 4 09:30:49 polaris dhcpd: DHCPACK on 10.10.10.13 to
> 00:1e:4c:a1:85:92 via eth0
> Sep 4 09:31:04 polaris dhcpd: DHCPREQUEST for 10.10.10.13 from
> 00:1e:4c:a1:85:92 via eth0
> Sep 4 09:31:04 polaris dhcpd: DHCPACK on 10.10.10.13 to
> 00:1e:4c:a1:85:92 via eth0
>
> Those are about 75 seconds about but sometimes they are much faster -
> 12 seconds
> apart on occasion.
> They go for hours and hours and then seem end like this:
>
> Sep 4 09:32:26 polaris dhcpd: DHCPREQUEST for 10.10.10.13 from
> 00:1e:4c:a1:85:92 via eth0
> Sep 4 09:32:26 polaris dhcpd: DHCPACK on 10.10.10.13 to
> 00:1e:4c:a1:85:92 via eth0
> Sep 4 09:32:44 polaris dhcpd: DHCPDISCOVER from 00:1e:4c:a1:85:92
> via eth0
> Sep 4 09:32:44 polaris dhcpd: DHCPOFFER on 10.10.10.13 to
> 00:1e:4c:a1:85:92 via
> eth0
> Sep 4 09:32:44 polaris dhcpd: DHCPREQUEST for 10.10.10.13
> (10.10.10.1) from
> 00:1e:4c:a1:85:92 via eth0
> Sep 4 09:32:44 polaris dhcpd: DHCPACK on 10.10.10.13 to
> 00:1e:4c:a1:85:92 via eth0
>
> So, apparently after repeatedly and rapidly asking for an address for
> HOURS it
> does a DISCOVER and then is satisfied... for a while.
>
> 2. UNKNOWN LEASE - There are also hundreds of these for both the
> wired
> 10.10.10.12, and wireless 10.10.10.13:
>
> Sep 2 14:30:38 polaris dhcpd: DHCPREQUEST for 10.10.10.13 from
> 00:1e:4c:a1:85:92 via eth0: unknown lease 10.10.10.13.
> Sep 2 14:30:47 polaris dhcpd: DHCPREQUEST for 10.10.10.12 from
> 00:1c:23:fd:50:de via eth0: unknown lease 10.10.10.12.
>
> What the heck is an "unknown lease"?
>
> Google is not helping me with either of these.
>
> Is this a client or server configuration issue (I'm betting client...
> but don't
> know.)
>
>
> Here is the dhcpd.conf file:
> =====================================================================
> authoritative;
> ddns-update-style none;
> option wpad-url code 252 = text;
>
> subnet 10.10.10.0 netmask 255.255.255.0
> {
> option broadcast-address 10.10.10.255;
> deny bootp;
> option domain-name "lucii.dnsalias.org";
> option domain-name-servers 10.10.10.1;
> default-lease-time 86400;
> max-lease-time 604800;
> option netbios-dd-server 10.10.10.1;
> option netbios-name-servers 10.10.10.1;
> option netbios-node-type 8;
> option subnet-mask 255.255.255.0;
> range 10.10.10.100 10.10.10.150;
> option routers 10.10.10.1;
> # wpad-url disabled
>
> }
>
> host neptune.lucii.dnsalias.org {
> hardware ethernet 00:1c:23:fd:50:de;
> fixed-address 10.10.10.12;
> }
>
> host neptunew.lucii.dnsalias.org {
> hardware ethernet 00:1e:4c:a1:85:92;
> fixed-address 10.10.10.13;
> }
>
> =====================================================================
>
>
>
> Thanks,
> Eric
> - --
> # Eric Lucas
> #
> # "Oh, I have slipped the surly bond of earth
> # And danced the skies on laughter-silvered wings...
> # -- John Gillespie Magee Jr
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.10 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAk5jp4oACgkQ2sGpvXQrZ/7EKACffwDouJHJCi7lPfEeu1S+Aim/
> cNUAoOS5BxvMd3IYdGJPuiIc20D46ctD
> =tntQ
> -----END PGP SIGNATURE-----
> ___________________________________________________________________________
> Philadelphia Linux Users Group --
> http://www.phillylinux.org
> Announcements -
> http://lists.phillylinux.org/mailman/listinfo/plug-announce
> General Discussion --
> http://lists.phillylinux.org/mailman/listinfo/plug
>
--
"Between subtle shading and the absence of light lies the nuance of iqlusion..." - Kryptos
Lee Marzke, lee@marzke.net http://marzke.net/lee/
IT Consultant, VMware, VCenter, SAN storage, infrastructure, SW CM
+1 800-393-5217 office +1 484-348-2230 fax
+1 610-564-4932 cell sip://8003935217@4aero.com VOIP
___________________________________________________________________________
Philadelphia Linux Users Group -- http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug