I am seeing extreme amount of network traffic on a host despite it should be idle. When I do
tcpdump -nni eth0 not net 10.10.10.10/32
I get lots of these
14:36:07.851048 IP 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from xx:xx:xx:xx:xx:xx, length 300
Port 67 is for DHCP request. What could a reason be that the host with the crossed out MAC address is sending out so many requests?