Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Strange address Shown in the dhcp leases

    Scheduled Pinned Locked Moved General pfSense Questions
    57 Posts 12 Posters 14.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ Offline
      johnpoz LAYER 8 Global Moderator
      last edited by

      so did you download your capture and look at in wireshark?

      Hmmm
      Doesn't look like you caught anything

      10:15:14.675016 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
      10:15:14.675594 IP 192.168.0.1.67 > 192.168.0.3.68: UDP, length 300
      10:20:05.543198 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
      10:20:05.543722 IP 192.168.0.1.67 > 192.168.0.3.68: UDP, length 300

      You have an issue with 192.168.0.3 for sure.. What is the lease time on it?  Your seeing dhcp traffic every couple of minutes on him??

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 25.07 | Lab VMs 2.8, 25.07

      1 Reply Last reply Reply Quote 0
      • F Offline
        firefox
        last edited by

        i installed wireshark

        but do i use it
        how do i take the Result And passes it to  wireshark

        1 Reply Last reply Reply Quote 0
        • johnpozJ Offline
          johnpoz LAYER 8 Global Moderator
          last edited by

          the download button, then open it in wireshark.. But from what you posted I don't see any dhcp traffic at the time of the lease.

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 25.07 | Lab VMs 2.8, 25.07

          1 Reply Last reply Reply Quote 0
          • T Offline
            tim.mcmanus
            last edited by

            @firefox:

            i installed wireshark

            but do i use it
            how do i take the Result And passes it to  wireshark

            Do you have any D-Link hardware on your network?  A Google search of that MAC address shows up regularly in forums discussing exactly the issue you are experiencing.  In many cases, there is a D-Link piece of hardware on the network where 00🆎00:00:00:00 shows up.

            Wireless access points have two NICs in them (minimum) the wired network and the wireless network.  If you do have a D-link device, see if you can determine what the MAC address of each interface is.

            1 Reply Last reply Reply Quote 0
            • johnpozJ Offline
              johnpoz LAYER 8 Global Moderator
              last edited by

              also just to cover all the bases on the pfsense via console or ssh to it do a ifconfig –- this will show you all the macs of all the inerfacers on the pfsense box.

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 25.07 | Lab VMs 2.8, 25.07

              1 Reply Last reply Reply Quote 0
              • F Offline
                firefox
                last edited by

                i do have a d link router that i use as AP
                but it is Connected and working for a year now
                And this address appeared week and a half maybe two weeks ago
                Also checked the mac address of this router
                It is different

                Currently the router is disconnected from the network Because of Different reason (Room renovation)

                fxp0: flags=8943 <up,broadcast,running,promisc,simplex,multicast>metric 0 mtu 1500
                	options=9 <rxcsum,vlan_mtu>ether 00:09:6b:d1:03:04
                	inet6 fe80::209:6bff:fed1:304%fxp0 prefixlen 64 scopeid 0x1 
                	nd6 options=3 <performnud,accept_rtadv>media: Ethernet autoselect (100baseTX <full-duplex>)
                	status: active
                ath0: flags=8843 <up,broadcast,running,simplex,multicast>metric 0 mtu 2290
                	ether 00:23:cd:d7:15:c4
                	media: IEEE 802.11 Wireless Ethernet autoselect mode 11g <hostap>status: running
                dc0: flags=8843 <up,broadcast,running,simplex,multicast>metric 0 mtu 1500
                	options=80008 <vlan_mtu,linkstate>ether 00:80:ad:73:b7:fe
                	inet6 fe80::280:adff:fe73:b7fe%dc0 prefixlen 64 scopeid 0x3 
                	nd6 options=1 <performnud>media: Ethernet autoselect (none)
                	status: no carrier
                fxp1: flags=8943 <up,broadcast,running,promisc,simplex,multicast>metric 0 mtu 1500
                	options=2008 <vlan_mtu,wol_magic>ether 00:02:b3:0b:ab:2e
                	inet6 fe80::202:b3ff:fe0b:ab2e%fxp1 prefixlen 64 scopeid 0x4 
                	nd6 options=1 <performnud>media: Ethernet autoselect (100baseTX <full-duplex>)
                	status: active
                enc0: flags=0<> metric 0 mtu 1536
                pfsync0: flags=0<> metric 0 mtu 1460
                	syncpeer: 224.0.0.240 maxupd: 128 syncok: 1
                lo0: flags=8049 <up,loopback,running,multicast>metric 0 mtu 16384
                	options=3 <rxcsum,txcsum>inet 127.0.0.1 netmask 0xff000000 
                	inet6 ::1 prefixlen 128 
                	inet6 fe80::1%lo0 prefixlen 64 scopeid 0x7 
                	nd6 options=3 <performnud,accept_rtadv>pflog0: flags=100 <promisc>metric 0 mtu 33192
                ath0_wlan0: flags=8943 <up,broadcast,running,promisc,simplex,multicast>metric 0 mtu 1500
                	ether 00:23:cd:d7:15:c4
                	inet6 fe80::223:cdff:fed7:15c4%ath0_wlan0 prefixlen 64 scopeid 0x9 
                	nd6 options=1 <performnud>media: IEEE 802.11 Wireless Ethernet autoselect mode 11g <hostap>status: running
                	ssid "my home wifi name" channel 7 (2442 MHz 11g) bssid 00:23:cd:d7:15:c4
                	regdomain NONE country IL indoor ecm authmode WPA privacy MIXED
                	deftxkey 2 TKIP 2:128-bit TKIP 3:128-bit txpower 30 scanvalid 60
                	protmode OFF burst -apbridge dtimperiod 1 -dfs
                bridge0: flags=8943 <up,broadcast,running,promisc,simplex,multicast>metric 0 mtu 1500
                	ether 02:11:79:20:3d:00
                	inet 192.168.0.1 netmask 0xffffff00 broadcast 192.168.0.255
                	id 00:00:00:00:00:00 priority 32768 hellotime 2 fwddelay 15
                	maxage 20 holdcnt 6 proto rstp maxaddr 100 timeout 1200
                	root id 00:00:00:00:00:00 priority 32768 ifcost 0 port 0
                	member: fxp1 flags=143 <learning,discover,autoedge,autoptp>ifmaxaddr 0 port 4 priority 128 path cost 55
                	member: ath0_wlan0 flags=143 <learning,discover,autoedge,autoptp>ifmaxaddr 0 port 9 priority 128 path cost 370370
                pppoe1: flags=89d1 <up,pointopoint,running,noarp,promisc,simplex,multicast>metric 0 mtu 1492
                	inet 5.22.135.57 --> 109.226.1.4 netmask 0xffffffff 
                	inet6 fe80::209:6bff:fed1:304%pppoe1 prefixlen 64 scopeid 0xa 
                	nd6 options=3 <performnud,accept_rtadv></performnud,accept_rtadv></up,pointopoint,running,noarp,promisc,simplex,multicast></learning,discover,autoedge,autoptp></learning,discover,autoedge,autoptp></up,broadcast,running,promisc,simplex,multicast></hostap></performnud></up,broadcast,running,promisc,simplex,multicast></promisc></performnud,accept_rtadv></rxcsum,txcsum></up,loopback,running,multicast></full-duplex></performnud></vlan_mtu,wol_magic></up,broadcast,running,promisc,simplex,multicast></performnud></vlan_mtu,linkstate></up,broadcast,running,simplex,multicast></hostap></up,broadcast,running,simplex,multicast></full-duplex></performnud,accept_rtadv></rxcsum,vlan_mtu></up,broadcast,running,promisc,simplex,multicast> 
                
                1 Reply Last reply Reply Quote 0
                • johnpozJ Offline
                  johnpoz LAYER 8 Global Moderator
                  last edited by

                  So you have a bridge with your wifi and lan (fxp1)  – redo the sniff test but listen on the wifi interface this time.

                  So if the device was connected to one of you AP on your lan network you should of seen it in the capture.  But guess it could of come in with your wlan on pfsense that you have bridged to your lan and not seen it in the capture..

                  What devices are connected to your pfsense wifi interface?

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 25.07 | Lab VMs 2.8, 25.07

                  1 Reply Last reply Reply Quote 0
                  • 2 Offline
                    2chemlud Banned
                    last edited by

                    Totally OT:

                    Some months ago I had a really bad dream that all the WLAN routers and devices could be connected to one big, global network by a bad, bad 3-letter agency in totalitarian country somewhere in the world…

                    Just a dream :-)

                    1 Reply Last reply Reply Quote 0
                    • F Offline
                      firefox
                      last edited by

                      – redo the sniff test but listen on the wifi interface this time.

                      what is – redo

                      What devices are connected to your pfsense wifi interface?

                      the wifi card used as AP

                      the PFsense is in one room when i connect a device to the wifi
                      i can go Anywhere and the device just jump from one AP to the other

                      room 1 wifi card
                      room 2 edimax router config as AP (no dhcp and static ip)
                      room 3 dlink router config as AP (no dhcp and static ip)
                      room 4 Cisco AP

                      1 Reply Last reply Reply Quote 0
                      • 2 Offline
                        2chemlud Banned
                        last edited by

                        redo = re-do = do it again :O

                        1 Reply Last reply Reply Quote 0
                        • P Offline
                          phil.davis
                          last edited by

                          http://forums.wi-fiplanet.com/printthread.php?t=6928&pp=40

                          And yesterday the phantom Mac address was back.
                          This time I noticed it came in about 10 seconds after I booted this machine.
                          While messing with some settings I noticed in the Connections window a (Internet Gateway ) Icon would pop in then disappear every 10 too 20 seconds.
                          This machine is running XP home . I also read something in the log about the DHCP allocator not setting an IP because a router was detected .( ERROR)
                          I found the setting in add remove windows componets / Networking services / Click Details / Internet Gateway device Discovery console yada yada yada . It was installed.
                          Un checking that took care of the second connection poping up in the connections window.
                          So far the phantom Mac hasen't been back since that change was made.

                          Maybe there is a clue there. Although I can't find any real documentation of how Internet Gateway device Discovery works under the hood in relation to this special MAC address.
                          I noticed this back in 2013 and never found out the real cause: https://forum.pfsense.org/index.php?topic=59993.0
                          Also there is a fix to the Status DHCP Leases display - it should display "Never" in the expiration column for those leases. It was fixed by https://github.com/pfsense/pfsense/commit/6eb5191b7c92186e242481699f51cc8b4e55646c and that fix should be in 2.2.2-RELEASE. But that pfSense display fix won't make any difference to the question here.

                          As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
                          If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

                          1 Reply Last reply Reply Quote 0
                          • F Offline
                            firefox
                            last edited by

                            here is the new output
                            only on wifi interface

                            the Strange mac address is still a no show
                            Maybe it really is the come from the dlink router
                            Despite I checked his address

                            The thing I do not understand in this output is
                            These address are Wired Connections not wifi

                            
                            16:50:04.946922 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            16:59:04.360586 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            17:00:26.474322 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            17:09:12.763631 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            17:10:32.328343 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            17:14:57.968738 IP 0.0.0.0.68 > 255.255.255.255.67: UDP, length 310
                            17:14:57.969167 IP 192.168.0.1.67 > 255.255.255.255.68: UDP, length 300
                            17:15:02.888060 IP 192.168.0.7.68 > 255.255.255.255.67: UDP, length 300
                            17:19:21.159904 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            17:20:41.037002 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            17:29:29.561993 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            17:30:00.233071 IP 192.168.0.7.68 > 255.255.255.255.67: UDP, length 300
                            17:30:49.136373 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            17:39:37.965282 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            17:40:57.840161 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            17:44:33.393391 IP 192.168.0.7.68 > 255.255.255.255.67: UDP, length 300
                            17:49:46.363984 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            17:51:05.969288 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            17:59:39.657821 IP 192.168.0.7.68 > 255.255.255.255.67: UDP, length 300
                            17:59:54.761551 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            18:01:14.638211 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            18:10:03.167636 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            18:11:22.735619 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            18:14:33.387821 IP 192.168.0.7.68 > 255.255.255.255.67: UDP, length 300
                            18:18:00.410207 IP 0.0.0.0.68 > 255.255.255.255.67: UDP, length 300
                            18:18:01.709306 IP 0.0.0.0.68 > 255.255.255.255.67: UDP, length 300
                            18:20:04.915718 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            18:21:31.129021 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            18:23:29.511918 IP 0.0.0.0.68 > 255.255.255.255.67: UDP, length 300
                            18:23:30.616485 IP 0.0.0.0.68 > 255.255.255.255.67: UDP, length 300
                            18:29:33.403293 IP 192.168.0.7.68 > 255.255.255.255.67: UDP, length 300
                            18:30:19.962727 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            18:31:41.791890 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            18:40:28.361789 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            18:41:48.228765 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            18:44:33.389689 IP 192.168.0.7.68 > 255.255.255.255.67: UDP, length 300
                            18:44:51.107038 IP 0.0.0.0.68 > 255.255.255.255.67: UDP, length 300
                            18:47:33.374745 IP 0.0.0.0.68 > 255.255.255.255.67: UDP, length 300
                            18:50:04.901743 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            18:51:56.334766 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            18:59:38.927277 IP 192.168.0.7.68 > 255.255.255.255.67: UDP, length 300
                            19:00:45.170026 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            19:02:05.064344 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            19:10:53.567921 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            19:12:13.148449 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            19:14:33.405320 IP 192.168.0.7.68 > 255.255.255.255.67: UDP, length 300
                            19:20:04.890322 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            19:21:19.290935 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            19:22:21.538517 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            19:29:38.631592 IP 192.168.0.7.68 > 255.255.255.255.67: UDP, length 300
                            19:31:10.368348 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            19:32:29.954557 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            19:41:18.762640 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            19:42:38.649702 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            19:44:33.406619 IP 192.168.0.7.68 > 255.255.255.255.67: UDP, length 300
                            19:50:04.885548 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            19:51:27.157582 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            19:52:46.714792 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            19:57:20.707791 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            19:58:40.603032 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            19:59:33.422239 IP 192.168.0.7.68 > 255.255.255.255.67: UDP, length 300
                            20:01:35.580328 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            20:02:55.139922 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            20:11:43.964421 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            20:13:03.528660 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            20:14:33.408914 IP 192.168.0.7.68 > 255.255.255.255.67: UDP, length 300
                            20:20:04.873922 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            20:21:52.366773 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            20:23:11.947860 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            20:29:33.424357 IP 192.168.0.7.68 > 255.255.255.255.67: UDP, length 300
                            20:32:00.760681 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            20:33:20.703226 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            20:36:05.391710 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            20:38:40.361161 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            20:42:09.189530 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            20:43:28.750449 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            20:44:33.424775 IP 192.168.0.7.68 > 255.255.255.255.67: UDP, length 300
                            20:46:59.114300 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            20:50:04.881957 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            20:52:17.571012 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            20:53:37.135946 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            20:59:38.916765 IP 192.168.0.7.68 > 255.255.255.255.67: UDP, length 300
                            21:02:25.958538 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            21:03:45.524222 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            21:12:34.366326 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            21:13:54.283470 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            21:14:33.427981 IP 192.168.0.7.68 > 255.255.255.255.67: UDP, length 300
                            21:20:04.883850 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            21:22:42.758918 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            21:24:02.565472 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            21:32:51.159977 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            21:34:11.037039 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            21:42:59.566688 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            21:44:19.132072 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            21:50:04.851522 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            21:53:07.959760 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            21:54:27.848230 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            22:03:16.362835 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            22:04:38.341074 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            22:11:30.502551 IP 0.0.0.0.68 > 255.255.255.255.67: UDP, length 548
                            22:11:30.653543 IP 0.0.0.0.68 > 255.255.255.255.67: UDP, length 548
                            22:13:24.767215 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            22:14:44.656963 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            22:20:04.834057 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            22:23:33.163266 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            22:24:52.957886 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            22:25:47.860490 IP 0.0.0.0.68 > 255.255.255.255.67: UDP, length 548
                            22:25:47.964457 IP 0.0.0.0.68 > 255.255.255.255.67: UDP, length 548
                            22:29:32.762507 IP 0.0.0.0.68 > 255.255.255.255.67: UDP, length 300
                            22:29:32.905872 IP 192.168.0.1.67 > 255.255.255.255.68: UDP, length 300
                            22:33:41.564000 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            22:35:01.443284 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            22:43:49.964095 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            22:45:09.540855 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            22:50:04.831501 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            22:53:58.365477 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            22:55:18.246079 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            23:04:06.762892 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            23:05:26.342318 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            23:14:15.173115 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            23:15:35.137992 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            23:20:04.815374 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            23:24:23.564900 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            23:25:43.423348 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            23:34:31.971521 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            23:35:51.865139 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            23:44:40.371967 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            23:45:59.941283 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            23:50:04.801278 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            23:51:46.398339 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            23:54:48.767573 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            23:56:08.654696 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            00:04:57.175979 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            00:06:16.833568 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            00:15:05.572321 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            00:16:25.448682 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            00:20:04.814134 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            00:25:13.992928 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            00:26:33.567891 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            00:35:22.380644 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            00:36:42.328351 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            00:39:38.472455 IP 0.0.0.0.68 > 255.255.255.255.67: UDP, length 300
                            00:39:38.496408 IP 0.0.0.0.68 > 255.255.255.255.67: UDP, length 300
                            00:45:30.766833 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            00:46:50.348500 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            00:50:04.783039 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            00:55:39.175490 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            00:56:59.066663 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            01:03:38.701229 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            01:05:47.579660 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            01:07:07.362840 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            01:15:55.978153 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            01:17:15.903623 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            01:20:04.766848 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            01:21:49.834132 IP 0.0.0.0.68 > 255.255.255.255.67: UDP, length 300
                            01:21:49.867642 IP 192.168.0.1.67 > 255.255.255.255.68: UDP, length 300
                            01:26:04.381798 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            01:27:23.981737 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            01:36:12.779567 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            01:37:34.899268 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            01:46:21.180954 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            01:47:40.757263 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            01:50:04.787146 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            01:56:29.588492 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            01:57:46.233574 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            01:58:48.484512 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            02:06:37.985605 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            02:07:57.554525 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            02:16:46.405926 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            02:18:06.286845 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            02:20:04.772701 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            02:26:54.786070 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            02:28:16.814984 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            02:37:03.185311 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            02:38:23.095862 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            02:47:11.593720 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            02:48:34.260904 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            02:50:04.747693 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            02:57:19.988155 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            02:58:39.874046 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            03:03:01.978539 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            03:05:10.290797 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            03:07:28.382643 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            03:08:48.916730 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            03:12:31.508051 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            03:17:36.797744 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            03:18:56.625317 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            03:20:04.739040 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            03:27:45.194042 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            03:29:05.241748 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            03:35:09.945490 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            03:37:53.598258 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            03:39:13.167811 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            03:48:01.997585 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            03:49:21.874639 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            03:58:10.394382 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            03:59:30.286902 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            04:05:04.729362 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            04:08:18.798177 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            04:09:38.386226 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            04:18:27.195107 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            04:19:47.101959 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            04:26:25.962585 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            04:28:35.629809 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            04:29:55.581568 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            04:35:09.983573 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            04:38:44.076584 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            04:40:03.913959 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            04:48:52.400740 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            04:50:04.715032 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            04:57:45.726146 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            04:59:00.804312 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            05:00:20.371562 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            05:05:04.734693 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            05:09:09.207349 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            05:10:28.785187 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            05:19:17.608257 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            05:20:37.490902 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            05:29:26.013013 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            05:30:45.586870 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            05:35:09.870732 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            05:39:34.411580 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            05:40:53.978242 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            05:49:42.807884 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            05:51:02.384769 IP 192.168.0.3.68 > 255.255.255.255.67: UDP, length 300
                            
                            

                            Maybe it is a bridge between wired and wireless interface in the dlink ?

                            1 Reply Last reply Reply Quote 0
                            • johnpozJ Offline
                              johnpoz LAYER 8 Global Moderator
                              last edited by

                              dude who is 192.168.0.3???  Something is WRONG with that box..  Why is is talking dhcp ever couple of minutes???

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 25.07 | Lab VMs 2.8, 25.07

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.