Rogue Detect 0.4-Alpha2 review

Rogue Detect sends DHCPDISCOVER packets to the network and listens for DHCP servers to respond. It can run continuously as a daemo

License: GPL (GNU General Public License) File size: 0K Developer: Alex Schumann

0

Rogue Detect sends DHCPDISCOVER packets to the network and listens for DHCP servers to respond.

It can run continuously as a daemon, or do a single probe and quit. It's written in Perl and can be easily extended to take any action you can think of in response to an unknown DHCP server (send pages, disable them or whatever).

Requirements:
Carp
Net::RawIP
Data::Dumper
FileHandle
POSIX (to do fork() stuff)
Net::SMTP (to send email)

Installation:

Unpack the DHCPDetect.pm and dhcpdetector.pl files somewhere
Install required perl libraries (www.cpan.org) (in debian try 'perl -MCPAN -eshell')
Edit dhcpdetector.pl - add your DHCP server's IP addresses, your email address, and edit the defaults to your taste.
set dhcpdetect.pl executable (chmod u+x dhcpdetect.pl)
run dhcpdetect as root: ./dhcpdetect.pl

What's New in This Release:
This release separates out all of the configuration options from the Perl script and puts them into roguedetect.cfg.
This should make it easier for users to upgrade in the future and maintain their installation without having to reconfigure constantly.
This release also adds automatic detection of your local hardware addresses, making it easier to move between boxes.