0.0.0.0 high port 67 on Lightspeed

[teklogic]

Hi,

 

Today has been a dreadful day, I am sure it is Friday the 13th.

 

I am facing a large problem with broadband speeds and the lightspeed box. I have already contacted the ISP and they have informed me that something is using a solid 12mb/ps on download and upload. I have had a look on the protocols on Lightspeed all I can find is 0.0.0.0 (iP Address), if I block it, it stops the internet working completely.

 

Any Ideas?

[twin--turbo]

Have you tried with the network disconnected from the Lightspeed, and then just one client.

 

Rob

[teklogic]

Hi, I will give this a go on Monday to see if the issue is still there.

[Geoff]

Port 67 is DHCP. IP 0.0.0.0 is the IP DHCP Clients use when broadcasting to find a DHCP server to give them an address. So chances are you have a misbehaving client. Run another network trace and this time capture the arp traffic and MAC addresses involved in the problematic DHCP traffic. Once you have the MAC consult your hardware inventory and/or your managed switches mac address tables.