Somewhere out on ResNet a rogue DHCP server was handing out bogus addresses. And because the rogue server was on the same side of a router as the clients requesting addresses, it usually beat our enterprise DHCP server to the punch. We evaluated the situation and decided that the best way to track down the bogus DHCP server was to take advantage of the intrusion detection systems we built a few months ago. I'm a big believer in building multipurpose tools and, as it seemed likely that more stray DHCP servers would pop up, we wanted to put a system in place that would continuously monitor for them. In my next column, I'll describe what we put in place, show you how we configured it, and give you pointers on setting up a similar installation.
Currier is an accomplished writer, public speaker, and photographer.
His credits include product reviews in Network World, features in PC Computing, and photographs in the Chronicle of Higher Education. Click to Download. Harness the power of your network. TRY SuperScout Web Filter FREE . Efficiency Through Web-Enabled Business Apps.