[Primipassi] "Anomalie" log DHCP

[Andrea Cataldi]

Salve a tutti,

ho un server (debian 2.14.qualcosa...) il quale funziona da firewall per la
rete aziendale, e da server di posta e da server dhcp.

Tramite logcheck mi faccio inviare un report.

Abbiamo una decina di macchine (e sono configurate per essere turtte "sotto"
dhcp) e non capisco perchè i report che mi arrivano sono pieni di qs richieste
solo dalla macchina 10.0.3.90 (macchina con winxp).
Nella rete ci sono almeno altri 3 win xp (che hanno la configurazione di rete
analoga a quello "incriminato"), un win2000 ed altro.

Ho provato a cercare qualcosa sul protocollo dhcp ed ho visto che il mex
DHCPINFORM viene inviato da un client quando deve chiedere delle ulteriori
informazioni (tipo dns o wins).

Purtroppo non so bene cosa guardare. Il problema non è "gravissimo" ma ero
curioso di capire perchè solo qella macchina genera qs tipo di problemi.

Suggerimenti e/o link sono tutti ben graditi.
Grazie 
Andrea
 

Estratto di un report:
***********************

Jun 24 17:11:11 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:11:11 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:11:15 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:11:15 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:11:15 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:11:15 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:12:54 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:12:54 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:12:54 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:12:54 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:12:58 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:12:58 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:12:58 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:12:58 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:14:37 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:14:37 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:14:37 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:14:37 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:14:40 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:14:40 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:14:40 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:14:40 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:31:45 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:31:45 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:31:45 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:31:45 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:31:48 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:31:48 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:31:48 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:31:48 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:33:28 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:33:28 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:33:28 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:33:28 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:33:33 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:33:33 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:33:33 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:33:33 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:35:11 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:35:11 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:35:11 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:35:11 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:35:15 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:35:15 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:35:15 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:35:15 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:52:19 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:52:19 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:52:19 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:52:19 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:52:22 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:52:22 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:52:22 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:52:22 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:54:02 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:54:02 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:54:02 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:54:02 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:54:05 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:54:05 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:54:05 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:54:05 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:55:13 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:55:13 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:55:13 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:55:13 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:55:16 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:55:16 MVS dhcpd: DHCPACK to 10.0.3.90
Jun 24 17:55:16 MVS dhcpd: DHCPINFORM from 10.0.3.90 via eth1
Jun 24 17:55:16 MVS dhcpd: DHCPACK to 10.0.3.90

grazie



	

	
		
___________________________________ 
Yahoo! Mail: gratis 1GB per i messaggi e allegati da 10MB 
http://mail.yahoo.it