[SATLUG] OT(?sorta) Linksys WCG200 - DHCP wrong (or bad) address with routing and NAT turned on

[Jennie Haywood]

On Tue, Apr 1, 2008 at 4:59 PM, Aaron Hackney
<techgeeks at aaronhackney.com> wrote:
>
>  >> How I found the 192.168.5.4 address was by turning OFF the routing and
>  >> NATing on my Linksys and letting *their* DHCP set the  info on a
>  >> windoze box and looking at it with ipconfig /all.
>  >>
>  >>
>  > Cute.  Then one of my earlier suggestions may apply: you might have had
>  > a rogue server injected somewhere in your up-channel network.  Under the
>  > best of conditions, some people's kids don't understand the need to
>  > isolate their networks when experimenting with creating a server.  If it
>  > was an intentional hack, however...
>  >
>  I would packet sniff your PC's DHCP request from the ISP. If there is a
>  rouge server or multiple DHCP servers, you should see DHCP offers from
>  several DHCP servers, as well as a single ACK and (possible many)
>  NACK(s) from your PC.
>  HTH
>  -A
>

I see if I have snoop on my linux box.... but it'll all have to wait
till I get back to SA.


-- 
Jennie Haywood
----
Everyone is crazy. It's just a matter of degree.
--
The oak tree in your backyard is just a nut that held its ground.