1

There seems to be some DHCP funnyness going on so I need to run something to show me what's going at a DHCP level. Before I upgraded my machine to Windows 7 I used DHCPloc.exe from the Windows XP support tools, and it worked like a charm.

I can't seem to find Support Tools for Windows 7, and trying to use the XP tools in compatibility mode doesn't work (I tried, it fails to open a receiving socket).

I need a tool to monitor DHCP traffic, and ideally one that lets me filter it to exclude DHCP traffic from our trusted DHCP servers and only show me un-authorised DHCP traffic.

3 Answers 3

4

You can still use DHCPloc.exe on Windows 7:

  1. Download "Windows XP Service Pack 2 Support Tools" from here.
  2. Right-click on the executable and select Properties->Compatibility then turn on Compatibility Mode and set it to "Windows XP (Service Pack 3)".
  3. Install as normal.

DHCPLoc.exe works fine on my Win7 x64 installation.

1
  • Doesn't work on Windows 10.
    – MuffinMan
    Nov 1, 2017 at 17:48
2

Since DHCP traffic is broadcast based you should be able to run a packet capture somewhere on your network and see it. Try installing Wireshark or Microsoft Network Monitor on your Windows 7 machine, start a capture, and filter for DHCP traffic.

0

You can use this technique to open DHCPLoc.exe on newer Windows versions.

  1. Download "Windows XP Service Pack 2 Support Tools" from [here][1].

  2. Open the downloaded file - WindowsXP-KB838079-SupportTools-ENU.exe - using 7-zip.

  3. DHCPLoc.exe is contained within the "support.cab" file.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .