DETECTION OVERVIEW
Category

An application or device had an excessive number of Dynamic Host Configuration Protocol (DHCP) response errors, which indicates that clients are unable to obtain a configured IP address from a DHCP server.
DHCP is a network management protocol for automatically assigning IP addresses and other communication parameters to devices connected to a network. A spike in DHCP errors indicates a communication breakdown between a client requesting an IP address and the server responsible for assigning the IP address. This issue might be related to a DHCP server configuration mismatch, a misconfigured DHCP relay agent, or a DHCP attack.
Check the scope and address pool configured on DHCP servers to ensure that subnets have enough available IP addresses for all clients.
Check for unauthorized rogue DHCP servers that might be sending conflicting DHCP Negative Acknowledgement (NAK) messages or incorrect configurations to clients.
Verify DHCP relay configurations on routers and switches to confirm that there are no issues blocking DHCP communication.
Network analysis and visibility solutions remain underrepresented in enterprises. Find out why in this preview of a new Wave report.
Learn more
ExtraHop® Named a Leader in First-Ever Gartner® Magic Quadrant™ for Network Detection and Response
Learn more
Visit this resource for more information.
Learn more
