Hyperactive DHCP server

evansnp
Posts: 162
Joined: Fri Feb 28, 2014 11:28 am

Hyperactive DHCP server

Post by evansnp »

Looking at the system logs for my router, there is an awful lot of DHCP traffic, often sending 'ACK's to the same client every few minutes.
Surely, this isn't correct?

Code: Select all

Mar 19 09:56:41 daemon err syslog: dhcpd:sending ACK to 192.168.1.106
Mar 19 10:15:51 daemon err syslog: dhcpd:sending ACK to 192.168.1.101
Mar 19 10:29:39 daemon err syslog: dhcpd:sending ACK to 192.168.1.120
Mar 19 10:50:13 daemon err syslog: dhcpd:sending OFFER of 192.168.1.111
Mar 19 10:50:13 daemon err syslog: dhcpd:sending ACK to 192.168.1.111
Mar 19 10:50:53 daemon err syslog: dhcpd:sending ACK to 192.168.1.117
Mar 19 10:51:08 daemon err syslog: dhcpd:sending ACK to 192.168.1.117
Mar 19 14:38:27 daemon err syslog: dhcpd:sending ACK to 192.168.1.114
Mar 19 15:56:45 daemon err syslog: dhcpd:sending ACK to 192.168.1.120
Mar 19 16:39:49 daemon err syslog: dhcpd:sending ACK to 192.168.1.118
Mar 19 16:56:59 daemon err syslog: dhcpd:sending ACK to 192.168.1.106
Mar 19 17:08:58 daemon err syslog: dhcpd:sending ACK to 192.168.1.120
Mar 19 17:13:32 daemon err syslog: dhcpd:sending ACK to 192.168.1.100
Mar 19 17:13:32 daemon err syslog: dhcpd:sending ACK to 192.168.1.100
Mar 19 17:16:40 daemon err syslog: dhcpd:sending OFFER of 192.168.1.121
Mar 19 17:16:40 daemon err syslog: dhcpd:sending ACK to 192.168.1.121
Mar 19 17:34:42 daemon err syslog: dhcpd:sending ACK to 192.168.1.100
Mar 19 17:41:25 daemon err syslog: dhcpd:sending ACK to 192.168.1.100
Mar 19 17:49:37 daemon err syslog: dhcpd:sending ACK to 192.168.1.100
Mar 19 17:49:53 daemon err syslog: dhcpd:sending ACK to 192.168.1.100
Mar 19 18:19:25 daemon err syslog: dhcpd:sending ACK to 192.168.1.112
Mar 19 18:20:52 daemon err syslog: dhcpd:sending ACK to 192.168.1.113
Mar 19 18:24:13 daemon err syslog: dhcpd:sending ACK to 192.168.1.108
Mar 19 18:51:47 daemon err syslog: dhcpd:sending OFFER of 192.168.1.110
Mar 19 18:51:47 daemon err syslog: dhcpd:sending OFFER of 192.168.1.110
Mar 19 18:51:48 daemon err syslog: dhcpd:sending ACK to 192.168.1.110
Mar 19 18:54:51 daemon err syslog: dhcpd:sending ACK to 192.168.1.113
Mar 19 19:08:00 daemon err syslog: dhcpd:sending ACK to 192.168.1.120
Mar 19 19:23:30 daemon err syslog: dhcpd:sending ACK to 192.168.1.100
Mar 19 19:44:34 daemon err syslog: dhcpd:sending ACK to 192.168.1.113
Mar 19 19:47:25 daemon err syslog: dhcpd:sending ACK to 192.168.1.120
Mar 19 19:49:33 daemon err syslog: dhcpd:sending ACK to 192.168.1.100
Mar 19 19:59:53 daemon err syslog: dhcpd:sending OFFER of 192.168.1.111
Mar 19 19:59:53 daemon err syslog: dhcpd:sending ACK to 192.168.1.111
Mar 19 20:00:04 daemon err syslog: dhcpd:sending OFFER of 192.168.1.116
Mar 19 20:00:04 daemon err syslog: dhcpd:sending ACK to 192.168.1.116
billion_fan
Posts: 5398
Joined: Tue Jul 19, 2011 4:30 pm

Re: Hyperactive DHCP server

Post by billion_fan »

evansnp wrote:Looking at the system logs for my router, there is an awful lot of DHCP traffic, often sending 'ACK's to the same client every few minutes.
Surely, this isn't correct?

Code: Select all

Mar 19 09:56:41 daemon err syslog: dhcpd:sending ACK to 192.168.1.106
Mar 19 10:15:51 daemon err syslog: dhcpd:sending ACK to 192.168.1.101
Mar 19 10:29:39 daemon err syslog: dhcpd:sending ACK to 192.168.1.120
Mar 19 10:50:13 daemon err syslog: dhcpd:sending OFFER of 192.168.1.111
Mar 19 10:50:13 daemon err syslog: dhcpd:sending ACK to 192.168.1.111
Mar 19 10:50:53 daemon err syslog: dhcpd:sending ACK to 192.168.1.117
Mar 19 10:51:08 daemon err syslog: dhcpd:sending ACK to 192.168.1.117
Mar 19 14:38:27 daemon err syslog: dhcpd:sending ACK to 192.168.1.114
Mar 19 15:56:45 daemon err syslog: dhcpd:sending ACK to 192.168.1.120
Mar 19 16:39:49 daemon err syslog: dhcpd:sending ACK to 192.168.1.118
Mar 19 16:56:59 daemon err syslog: dhcpd:sending ACK to 192.168.1.106
Mar 19 17:08:58 daemon err syslog: dhcpd:sending ACK to 192.168.1.120
Mar 19 17:13:32 daemon err syslog: dhcpd:sending ACK to 192.168.1.100
Mar 19 17:13:32 daemon err syslog: dhcpd:sending ACK to 192.168.1.100
Mar 19 17:16:40 daemon err syslog: dhcpd:sending OFFER of 192.168.1.121
Mar 19 17:16:40 daemon err syslog: dhcpd:sending ACK to 192.168.1.121
Mar 19 17:34:42 daemon err syslog: dhcpd:sending ACK to 192.168.1.100
Mar 19 17:41:25 daemon err syslog: dhcpd:sending ACK to 192.168.1.100
Mar 19 17:49:37 daemon err syslog: dhcpd:sending ACK to 192.168.1.100
Mar 19 17:49:53 daemon err syslog: dhcpd:sending ACK to 192.168.1.100
Mar 19 18:19:25 daemon err syslog: dhcpd:sending ACK to 192.168.1.112
Mar 19 18:20:52 daemon err syslog: dhcpd:sending ACK to 192.168.1.113
Mar 19 18:24:13 daemon err syslog: dhcpd:sending ACK to 192.168.1.108
Mar 19 18:51:47 daemon err syslog: dhcpd:sending OFFER of 192.168.1.110
Mar 19 18:51:47 daemon err syslog: dhcpd:sending OFFER of 192.168.1.110
Mar 19 18:51:48 daemon err syslog: dhcpd:sending ACK to 192.168.1.110
Mar 19 18:54:51 daemon err syslog: dhcpd:sending ACK to 192.168.1.113
Mar 19 19:08:00 daemon err syslog: dhcpd:sending ACK to 192.168.1.120
Mar 19 19:23:30 daemon err syslog: dhcpd:sending ACK to 192.168.1.100
Mar 19 19:44:34 daemon err syslog: dhcpd:sending ACK to 192.168.1.113
Mar 19 19:47:25 daemon err syslog: dhcpd:sending ACK to 192.168.1.120
Mar 19 19:49:33 daemon err syslog: dhcpd:sending ACK to 192.168.1.100
Mar 19 19:59:53 daemon err syslog: dhcpd:sending OFFER of 192.168.1.111
Mar 19 19:59:53 daemon err syslog: dhcpd:sending ACK to 192.168.1.111
Mar 19 20:00:04 daemon err syslog: dhcpd:sending OFFER of 192.168.1.116
Mar 19 20:00:04 daemon err syslog: dhcpd:sending ACK to 192.168.1.116

Are these IP address assigned to mobile devices?? If not what IP address does these IP's refer too??
evansnp
Posts: 162
Joined: Fri Feb 28, 2014 11:28 am

Re: Hyperactive DHCP server

Post by evansnp »

It's a mixture of static devices i.e. always powered, and some mobile devices i.e. laptops, and phones.
billion_fan
Posts: 5398
Joined: Tue Jul 19, 2011 4:30 pm

Re: Hyperactive DHCP server

Post by billion_fan »

evansnp wrote:It's a mixture of static devices i.e. always powered, and some mobile devices i.e. laptops, and phones.
What firmware are you running?
evansnp
Posts: 162
Joined: Fri Feb 28, 2014 11:28 am

Re: Hyperactive DHCP server

Post by evansnp »

2.32d
billion_fan
Posts: 5398
Joined: Tue Jul 19, 2011 4:30 pm

Re: Hyperactive DHCP server

Post by billion_fan »

evansnp wrote:2.32d
Are you experiencing any issues with any deivces on the network??
evansnp
Posts: 162
Joined: Fri Feb 28, 2014 11:28 am

Re: Hyperactive DHCP server

Post by evansnp »

No, all seems fine, but surely this cannot be normal?
davidwf
Posts: 18
Joined: Wed Apr 16, 2014 8:42 am

Re: Hyperactive DHCP server

Post by davidwf »

I have been getting exactly the same issues with the network being flooded by DHCP requests.....allocating a fixed IP address outside of the DHCP range seems to have quelled the reports but as the O.P. said it cannot be correct.
I am also using 2.32d
billion_fan
Posts: 5398
Joined: Tue Jul 19, 2011 4:30 pm

Re: Hyperactive DHCP server

Post by billion_fan »

davidwf wrote:I have been getting exactly the same issues with the network being flooded by DHCP requests.....allocating a fixed IP address outside of the DHCP range seems to have quelled the reports but as the O.P. said it cannot be correct.
I am also using 2.32d
Are the devices that reported within the system log, wireless devices??

Do they connect on the 2.4ghz band or 5ghz band??
davidwf
Posts: 18
Joined: Wed Apr 16, 2014 8:42 am

Re: Hyperactive DHCP server

Post by davidwf »

yes they are wireless - an Android phone and a D-Link DAP1160 router
Both connect at 2.4G
Post Reply