Discussion:
[Nagios-users] detecting rogue dhcp server
Chris
2009-03-26 04:20:49 UTC
Permalink
Is there any plugin exist to detect rogue dhcp servers across all vlans/ subnet?

I have had a look at two programs (not Nagios plugins): dhcp_probe and
roguedetect - none suitable for human consumption yet. There is an
excellent program on Windows call "dhcploc.exe" but I'm on Linux.

Thanks.
Andreas Ericsson
2009-03-26 08:52:04 UTC
Permalink
Post by Chris
Is there any plugin exist to detect rogue dhcp servers across all vlans/ subnet?
I have had a look at two programs (not Nagios plugins): dhcp_probe and
roguedetect - none suitable for human consumption yet. There is an
excellent program on Windows call "dhcploc.exe" but I'm on Linux.
check_dhcp can sort of do what you want. Give it a whirl.
--
Andreas Ericsson ***@op5.se
OP5 AB www.op5.se
Tel: +46 8-230225 Fax: +46 8-230231

Considering the successes of the wars on alcohol, poverty, drugs and
terror, I think we should give some serious thought to declaring war
on peace.
Chris
2009-03-30 03:47:20 UTC
Permalink
Post by Andreas Ericsson
Post by Chris
Is there any plugin exist to detect rogue dhcp servers across all vlans/ subnet?
I have had a look at two programs (not Nagios plugins): dhcp_probe and
roguedetect - none suitable for human consumption yet. There is an
excellent program on Windows call "dhcploc.exe" but I'm on Linux.
check_dhcp can sort of do what you want. Give it a whirl.
After doing a lot of Google searching I found
http://archive.netbsd.se/?ml=nagiosplug-devel&a=2007-12&t=5955729

Looks like there is an "-x" switch which will do exactly that.

But I'm having trouble locating that check_dhcp C program or even the
plugin bundle.

Mine doesn't have the "-x" switch.

Does anyone know where can I download this code?

Thanks.

Loading...