Don't understand these DHCP entries

bmf7777

my log is filled with only these entries (shouldn't i see other device dhcp entries?) ... this device (.254) has been removed from my network yet i continue to see these messages ... any ideas why?

Apr 1 00:28:57 dhcpd 60812 dhcp.c:4131: Failed to send 300 byte long packet over fallback interface.
Apr 1 00:28:57 dhcpd 60812 send_packet: Host is down
Apr 1 00:28:57 dhcpd 60812 DHCPACK on 192.168.1.254 to 70:88:6b:10:5e:5d (AWAIR-R2-105E5D) via ix1
Apr 1 00:28:57 dhcpd 60812 DHCPREQUEST for 192.168.1.254 from 70:88:6b:10:5e:5d (AWAIR-R2-105E5D) via ix1
Apr 1 00:28:57 dhcpd 60812 reuse_lease: lease age 1374 (secs) under 25% threshold, reply with unaltered, existing lease for 192.168.1.254

stephenw10

@bmf7777 said in Don't understand these DHCP entries:

Apr 1 00:28:57 dhcpd 60812 DHCPREQUEST for 192.168.1.254 from 70:88:6b:10:5e:5d (AWAIR-R2-105E5D) via ix1

Something is still sending requests.

Yes you should see entries for all devices using the server logged by default.

Steve

Gertjan

@bmf7777

Apr 1 00:28:57 
Apr 1 00:28:57 
Apr 1 00:28:57 
Apr 1 00:28:57 
Apr 1 00:28:57 
Apr 1 00:28:57

What is the order of these massages ? Top to bottom or bottom to top ?

A request came in :

DHCPREQUEST for 192.168.1.254 from 70:88:6b:10:5e:5d (AWAIR-R2-105E5D) via ix1

So, device 70:88:6b:10:5e:5d known as "AWAIR-R2-105E5D" wants to use 192.168.1.254.
Or it was granted this lease already very recently (less then 25% of the previously accorded lease time)

@bmf7777 said in Don't understand these DHCP entries:

this device (.254) has been removed from my network

Was this the same device ? If so, your efforts were not enough, or 'they' are not telling the truth to you, they did not disconnect it. Remove its battery, or take it for a walk in the forest.
Or ban "70:88:6b:10:5e:5d".

Btw : the name of the device AWAIR is a wifi device ?
So, you have two more things to check :
The DHCPREQUEST came to pfSense from this device.
Do the answers from pfSense reach the device back, because if they don't, the device will keep requesting ...
Check also your AP. Can it show you the radio strength of the connected devices, and the negotiated throughput ?