ISC DHCP客户端不断询问地址

突然之间，我的大学的networking已经冻结，我们设法将问题隔离到在DHCP端口上发送的大量UDP数据包。 仔细观察，我们发现有些客户端使用DHCP请求保持垃圾邮件服务器，尽pipe服务器似乎回应。 我在服务器上粘贴一个syslog文件的样本（[[client IP]]在所有条目中都是相同的，服务器和客户端IP在同一个子网中）。 非常奇怪的是，这不仅仅是一个客户端，甚至还有一个无线路由器，它现在才刚刚起步。 isc-dhcp-server没有被更新。 任何援助将不胜感激。

Feb 25 17:57:46 zeus dhcpd: DHCPRELEASE of [[client IP]] from 00:22:75:ea:e5:dc via eth1 (found) Feb 25 17:57:48 zeus dhcpd: message repeated 3 times: [ DHCPRELEASE of [[client IP]] from 00:22:75:ea:e5:dc via eth1 (found)] Feb 25 17:57:48 zeus dhcpd: DHCPDISCOVER from 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:49 zeus dhcpd: DHCPOFFER on [[client IP]] to 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:50 zeus dhcpd: DHCPDISCOVER from 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:50 zeus dhcpd: DHCPOFFER on [[client IP]] to 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:50 zeus dhcpd: DHCPREQUEST for [[client IP]] ([[server IP]]) from 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:50 zeus dhcpd: DHCPACK on [[client IP]] to 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:51 zeus dhcpd: DHCPDISCOVER from 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:51 zeus dhcpd: DHCPOFFER on [[client IP]] to 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:51 zeus dhcpd: DHCPREQUEST for [[client IP]] ([[server IP]]) from 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:51 zeus dhcpd: DHCPACK on [[client IP]] to 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:51 zeus dhcpd: DHCPDISCOVER from 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:51 zeus dhcpd: DHCPOFFER on [[client IP]] to 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:51 zeus dhcpd: DHCPREQUEST for [[client IP]] ([[server IP]]) from 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:51 zeus dhcpd: DHCPACK on [[client IP]] to 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:51 zeus dhcpd: DHCPDISCOVER from 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:51 zeus dhcpd: DHCPOFFER on [[client IP]] to 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:51 zeus dhcpd: DHCPREQUEST for [[client IP]] ([[server IP]]) from 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:51 zeus dhcpd: DHCPACK on [[client IP]] to 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:51 zeus dhcpd: DHCPDISCOVER from 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:51 zeus dhcpd: DHCPOFFER on [[client IP]] to 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:51 zeus dhcpd: DHCPREQUEST for [[client IP]] ([[server IP]]) from 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:51 zeus dhcpd: DHCPACK on [[client IP]] to 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:52 zeus dhcpd: DHCPDISCOVER from 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:52 zeus dhcpd: DHCPOFFER on [[client IP]] to 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:52 zeus dhcpd: DHCPREQUEST for [[client IP]] ([[server IP]]) from 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:52 zeus dhcpd: DHCPACK on [[client IP]] to 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:52 zeus dhcpd: DHCPDISCOVER from 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:52 zeus dhcpd: DHCPOFFER on [[client IP]] to 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:52 zeus dhcpd: DHCPREQUEST for [[client IP]] ([[server IP]]) from 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:52 zeus dhcpd: DHCPACK on [[client IP]] to 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:53 zeus dhcpd: DHCPDISCOVER from 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:53 zeus dhcpd: DHCPOFFER on [[client IP]] to 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:53 zeus dhcpd: DHCPREQUEST for [[client IP]] ([[server IP]]) from 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:53 zeus dhcpd: DHCPACK on [[client IP]] to 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:53 zeus dhcpd: DHCPDISCOVER from 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:53 zeus dhcpd: DHCPOFFER on [[client IP]] to 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:53 zeus dhcpd: DHCPREQUEST for [[client IP]] ([[server IP]]) from 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:53 zeus dhcpd: DHCPACK on [[client IP]] to 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:53 zeus dhcpd: DHCPDISCOVER from 00:22:75:ea:e5:dc via eth1 Feb 25 17:57:53 zeus dhcpd: DHCPOFFER on [[client IP]] to 00:22:75:ea:e5:dc via eth1 

/var/lib/dh​​cp/dhcpd.leases的内容：

 lease [[client IP]] { starts 4 2016/02/25 16:06:25; ends 5 2016/02/26 16:06:25; cltt 4 2016/02/25 16:06:25; binding state active; next binding state free; rewind binding state free; hardware ethernet 00:22:75:ea:e5:dc; uid "\001\000\"u\352\345\334"; } lease [[client IP]] { starts 4 2016/02/25 16:06:25; ends 5 2016/02/26 16:06:25; cltt 4 2016/02/25 16:06:25; binding state active; next binding state free; rewind binding state free; hardware ethernet 00:22:75:ea:e5:dc; uid "\001\000\"u\352\345\334"; } lease [[client IP]] { starts 4 2016/02/25 16:06:26; ends 5 2016/02/26 16:06:26; cltt 4 2016/02/25 16:06:26; binding state active; next binding state free; rewind binding state free; hardware ethernet 00:22:75:ea:e5:dc; uid "\001\000\"u\352\345\334"; } lease [[client IP]] { starts 4 2016/02/25 16:06:27; ends 4 2016/02/25 16:08:53; tstp 4 2016/02/25 16:08:53; cltt 4 2016/02/25 16:06:27; binding state free; hardware ethernet 00:22:75:ea:e5:dc; uid "\001\000\"u\352\345\334"; } lease [[client IP]] { starts 4 2016/02/25 16:08:57; ends 5 2016/02/26 16:08:57; cltt 4 2016/02/25 16:08:57; binding state active; next binding state free; rewind binding state free; hardware ethernet 00:22:75:ea:e5:dc; uid "\001\000\"u\352\345\334"; } lease [[client IP]] { starts 4 2016/02/25 16:08:57; ends 4 2016/02/25 16:08:57; tstp 4 2016/02/25 16:08:57; cltt 4 2016/02/25 16:08:57; binding state free; hardware ethernet 00:22:75:ea:e5:dc; uid "\001\000\"u\352\345\334"; } lease [[client IP]] { starts 4 2016/02/25 16:08:57; ends 5 2016/02/26 16:08:57; cltt 4 2016/02/25 16:08:57; binding state active; next binding state free; rewind binding state free; hardware ethernet 00:22:75:ea:e5:dc; uid "\001\000\"u\352\345\334"; } lease [[client IP]] { starts 4 2016/02/25 16:08:57; ends 4 2016/02/25 16:08:57; tstp 4 2016/02/25 16:08:57; cltt 4 2016/02/25 16:08:57; binding state free; hardware ethernet 00:22:75:ea:e5:dc; uid "\001\000\"u\352\345\334"; } 

• 如何让连接的无线路由器的DHCP服务器不在同一networking中的另一台路由器？
• DHCP无法通过路由器递送报价
• 解决DHCP范围耗尽 – 多个/ 24个子网或单个/ 23个子网？
• 如何在cisco交换机上显示每个VLAN的DHCP服务器的IP地址？
• IPv6地址生存期：首选与有效租约

 host probably-infected { hardware ethernet 00:22:75:ea:e5:dc; fixed-address <SOME FIXED IP>; }