Turn off DHCP on the server you know about and run dhclient on a machine on the network. Or leave Ethereal running on a machine and set the filters to only sniff DHCP traffic, and ignore everything from the valid server. Or nmap the whole network to see if any are responding on DHCP's port. Or look at the gateway information for a machine that's gotten an IP from the bogus server. This is just off the top of my head, but the first one and last one seem like the easiest solutions. Nick Mike Tuller wrote: > I have a problem where there is a rouge DHCP server running on our network, > and every once in a while, a system will grab an IP from it. Is there a > simple way to search the network to see what servers are running as a DHCP > server? > > > Mike Tuller ------ http://USFamily.Net/info - Unlimited Internet - From $8.99/mo! ------ _______________________________________________ TCLUG Mailing List - Minneapolis/St. Paul, Minnesota Help beta test TCLUG's potential new home: http://plone.mn-linux.org Got pictures for TCLUG? Beta test http://plone.mn-linux.org/gallery tclug-list at mn-linux.org https://mailman.real-time.com/mailman/listinfo/tclug-list