How do I find if there is a rogue DHCP server on my Network?

One simple method is to simply run a sniffer like tcpdump/wireshark on a computer and send out a DHCP request. If you see any offers other then from your real DHCP server then you know you have a problem.

Leave a Comment