OPNsense Forum

Archive => 21.1 Legacy Series => Topic started by: Bytechanger on April 29, 2021, 03:17:20 PM

Title: Suddenly DHCPREQUEST flood on WAN Adapter, wrong subnet....
Post by: Bytechanger on April 29, 2021, 03:17:20 PM
Whats happening suddenly?


2021-04-29T15:13:05 dhclient[75889] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-29T15:12:55 dhclient[75889] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-29T15:12:34 dhclient[75889] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-29T15:12:24 dhclient[75889] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-29T15:12:16 dhclient[75889] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-29T15:12:09 dhclient[75889] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-29T15:11:28 dhclient[75889] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-29T15:10:52 dhclient[75889] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-29T15:10:40 dhclient[75889] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-29T15:10:28 dhclient[75889] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-29T15:10:14 dhclient[75889] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-29T15:10:08 dhclient[75889] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-29T15:10:04 dhclient[75889] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-29T15:10:01 dhclient[75889] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-29T15:09:58 dhclient[75889] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-29T15:09:56 dhclient[75889] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-29T15:09:54 dhclient[75889] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-29T15:09:53 dhclient[75889] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-29T15:09:52 dhclient[75889] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-29T15:09:51 dhclient[75889] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-29T15:09:50 dhclient[75889] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-29T15:09:49 dhclient[75889] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-29T15:09:48 dhclient[75889] DHCPREQUEST on re0 to 100.69.XX.1 port 67


re0 is my WAN Adapter, but 100.69.XX.1 not my WAN Address or Subnet!
WAN on re0 is 100.70.XX.XX ... (CGNAT for IPv4) I ony have native IPv6.
OPNSense runs normaly, but suddenly this is shown on log.?!

Greets
Title: Re: Suddenly DHCPREQUEST flood on WAN Adapter, wrong subnet....
Post by: Bytechanger on April 29, 2021, 03:31:56 PM
OK, reboot seems to do the job?
It´s gone.
Title: Re: Suddenly DHCPREQUEST flood on WAN Adapter, wrong subnet....
Post by: Bytechanger on April 30, 2021, 11:24:35 AM
Oh no,

it returns now....

any idea ?

2021-04-30T11:21:59 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:21:29 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:21:15 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:21:08 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:20:54 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:20:46 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:20:38 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:20:15 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:19:16 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:18:36 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:17:58 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:15:56 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:15:04 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:14:30 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:14:01 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:13:50 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:13:36 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:13:21 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:12:20 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:11:29 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:10:48 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:10:31 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:09:59 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:09:46 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:09:36 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:09:28 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:08:47 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:07:44 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:06:26 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:05:55 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:04:58 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:04:38 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:04:21 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:04:08 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:03:48 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:03:41 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:03:38 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:03:36 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:03:35 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:03:34 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67
2021-04-30T11:03:33 dhclient[42499] DHCPREQUEST on re0 to 100.69.XX.1 port 67


Don´t know on 100.69 belongs to?
My re0->WAN Adapter got an 100.70.XX Address from Fibre-Modem.
Address Range belongs to CGNat, right?
Title: Re: Suddenly DHCPREQUEST flood on WAN Adapter, wrong subnet....
Post by: chemlud on April 30, 2021, 11:50:41 AM
DHCP is broadcast via UDP and the server can have any random IP (including private IPs). Doesn't have to be in any network related to your box.

https://en.wikipedia.org/wiki/Dhcp

Why you see these requests? dunno...