Simulating DHCPDISCOVER

Wed Dec 6 20:58:06 UTC 2006

You should check out hping2 - you can craft packets with it.

Another tool is dhcping
http://c3rb3r.openwall.net/dhcping/about.html

Google for DHCP Audit found me this site with TONS of links:

http://www.oissg.org/component/option,com_bookmarks/Itemid,147/mode,0/ca
tid,6/navstart,0/search,*/

Eric Malenfant, NSA, CCSE+ NG, CCSE NGX, RHCE 

-----Original Message-----
From: owner-tlug-lxSQFCZeNF4 at public.gmane.org [mailto:owner-tlug-lxSQFCZeNF4 at public.gmane.org] On Behalf Of ext Tim
Writer
Sent: Wednesday, December 06, 2006 12:18 PM
To: tlug-lxSQFCZeNF4 at public.gmane.org
Subject: Re: [TLUG]: Simulating DHCPDISCOVER

fraser-eicrhRFjby5dCsDujFhwbypxlwaOVQ5f at public.gmane.org writes:

> Hi,
> 
> Does anyone know of a way to determine IP address of DHCP server on a 
> subnet without running a dhcp client and without running a portscan?
> 
> Basically, I'd like to broadcast a DHCPDISCOVER packet like a real 
> DHCP client does and see who replies.  I tried netcat but 
> (unsurprisingly didn't have success.

This isn't excatly the answer you're looking for but if you look at
/etc/dhcp3/dhclient-script [1], you'll see this script takes care of the
complete configuration of the interface and sets up the routing. This
implies that dhclient is a light weight program that talks the DHCP
protocol, delegating interface configuration, routing, etc. to scripts.
By running dhclient with a different script, config, etc. (which you can
specify on the command line), you may be able to do what you want.

If you take this approach, let me know if it works out.

[1] This is on Ubuntu 6.10 but I imagine Debian Sarge/Etch would be
similar.

-- 
tim writer <tim-s/rLXaiAEBtBDgjK7y7TUQ at public.gmane.org>                                  starnix
inc.
647.722.5301                                      toronto, ontario,
canada
http://www.starnix.com              professional linux services &
products
--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to
UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists
--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists