syslog DHCP messages

[Tim Medford]

The syslog on our production server is consumed by messages about DHCP. They look like this:

Apr 3 07:27:30 24.7.129.58 01B2 400 DHCP SERVER Offered | Offering: 10.
0.1.50 To: 003065122C1C By: 24.7.129.58
Apr 3 08:24:52 24.12.182.43 0D94 400 DHCP SERVER Offered | Offering: 10.
0.1.22 To: 0030651238AF By: 24.12.182.43

These messages repeat hundreds, if not thousands of times throughout the day.

Is this normal? We have a DHCP server on our network, but this machine is not it. I thought I had disabled DHCP but perhaps not?

Thanks in advance,
Tim

[Vincenzo Restuccia]

Check /etc/rc.config.d/netconf if you have a configuration of DHCP.

[Paula J Frazer-Campbell]

Tim
Chech that you do not DHCP running, also it appears from your messages that more than one ip address is offering addresses. It may be that your machine is just logging from these multiple DHCP servers.

Apr 3 07:27:30 24.7.129.58 01B2 400 DHCP SERVER Offered | Offering: 10.
0.1.50 To: 003065122C1C By: 24.7.129.58
Apr 3 08:24:52 24.12.182.43 0D94 400 DHCP SERVER Offered | Offering: 10.
0.1.22 To: 0030651238AF By: 24.12.182.43



Paula

[Tim Medford]

Thanks for the info, I checked and I have the following in netconf:

DHCP_ENABLE[0]=0
DHCP_ENABLE[1]=0

Any other things I should look at?

[Paula J Frazer-Campbell]

Tim
From your log I can see two ip address offering: -

1. 24.7.129.58
2. 24.12.182.43

Check out which machines have these ip addresses.

I imagine one is the DHCP server and the other is a machine wrongly configured to be a DHCP server.

Paula