Which process is sending broadcast packets during boot sequence?
Issue
Our host sends broadcast packet when it boots, which process does that? The packet's source port UDP 68, target port UDP 67. Source IP is set to the host's IP address. The NIC is not configured as DHCP client. Therefore, we believe that it is not DHCP DISCOVER packet.
We tried to see it by audit. However, we could not find bind process around the time.
- Could you please tell us how to find what process sends broadcast packet?
- Are there any cases of RHEL8 host sending a BOOTP/DHCP packet with that host's IP address during boot sequence?
Environment
- Red Hat Enterprise Linux (RHEL) 8 and 9
- networking
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.