Skip to content

Topic 05: Detect DHCP attack

Jump to bottom
Pouriya Mashali Tabari edited this page Apr 12, 2023 · 1 revision

How to detect DHCP attack

istockphoto-1287005335-170667a

  1. on the wireshark, write the bootp filter to watching dhcp packets.
  2. if you see many DHCP Discover packet, with black color, it means, you are in DHCP attack. also you can check the IP pool into the DHCP server. your pool is full.

a part of Lpic-3 Security Powered by Pouirya M. Tabari spring 1402

LPIC-3 Security

Clone this wiki locally