How to Use snoop to Monitor DHCP Network Traffic

1. Become superuser on the DHCP server system.

2. Start snoop to begin tracing network traffic across the server's network interface.

   # /usr/sbin/snoop -d interface -o snoop-output-filename udp port 67 or udp port 68

   For example, you might type the following command:

   # /usr/sbin/snoop -d hme0 -o /tmp/snoop.output udp port 67 or udp port 68

   snoop continues to monitor the interface until you stop snoop by pressing Control-C after you have the information that you need.

3. Boot the client system, or restart the dhcpagent on the client system.

   How to Run the DHCP Client in Debugging Mode describes how to restart dhcpagent.

4. On the server system, use snoop to display the output file with the contents of network packets:

   # /usr/sbin/snoop -i snoop-output-filename -x0 -v

   For example, you might type the following command:

   # /usr/sbin/snoop -i /tmp/snoop.output -x0 -v
   

See Also

See DHCP snoop Output for information about interpreting the output.