Detect Rogue DHCP Servers on Windows

Rouge DHCP Server?

Rogue DHCP servers are those DHCP servers that are misconfigured or unauthorized unknowingly or those that are configured with a malicious intent for network attacks. Either be the case the impact on clients that are serviced by the rogue DHCP servers are critical. That is the clients would experience network access problems due to rogue DHCP server leasing incorrect IP addresses & incorrect options to the client. Security threats are caused when malicious user with rogue DHCP server can spread bad network parameters and thereby sniff the traffic sent by the clients. There are also certain Trojans like DNS-changing that uses a compromised machine in the network to pollute the network by installing rogue DHCP servers on the machine. Rogue detection tool is a GUI tool that checks if there are any rogue DHCP servers in the local subnet.

Following are the features with this tool:

1. The tool can be run one time or can be scheduled to run at specified interval.

2. Can be run on a specified interface by selecting one of the discovered interfaces.

3. Retrieves all the authorized DHCP servers in the forest and displays them.

4. Ability to validate (not Authorize in AD) a DHCP server which is not rogue and persist this information

5. Minimize the tool, which makes it invisible. A tray icon will be present which would display the status.

AttachmentSize
RogueChecker.zip31.33 KB

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.
Brilliant!

Simply brilliant!!

Submitted by Anonymous on Wed, 07/22/2009 - 11:44.
File Download

Did you remove the file, the link goes to page not found.

Submitted by Anonymous on Fri, 03/05/2010 - 10:39.
its back

the site was offline for maintence (security patch for drupal probably) and the file was missing when it came back up. the file seems to be working again though! thank you tim!!

Submitted by Anonymous on Fri, 03/05/2010 - 15:42.

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

Teh haps'

Type your Nick

User login