Tuesday, May 14, 2013

How to find a Rogue DHCP Server in your network

1. Install Wireshark and start capturing
2. Filter for "bootp" , may take bit before you see something
3. Look for OFFER and ACKs
4. If you find one, check source MAC and find out which device it is

c'est tout

No comments:

Post a Comment