So I have been watching my RBR960 router log file, which I have emailed to myself weekly. This past week, there were some very interesting flurries of DHCP requests from my 2 RBS960 satellites. All the other devices had minimal DHCP requests for the week (although I have moved some of the Apple devices to static IP addresses outside the DHCP range).
There was no physical relocation or anything odd going on at the time.
Oddity #1: 25 DHCP requests from an RBS960 in a span of 9 minutes:
[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Tuesday, Apr 09,2024 14:03:39
[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Tuesday, Apr 09,2024 14:03:43
[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Tuesday, Apr 09,2024 14:03:44
[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Tuesday, Apr 09,2024 14:03:54
[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Tuesday, Apr 09,2024 14:03:57
[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Tuesday, Apr 09,2024 14:04:01
[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Tuesday, Apr 09,2024 14:04:04
[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Tuesday, Apr 09,2024 14:04:13
[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Tuesday, Apr 09,2024 14:06:59
[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Tuesday, Apr 09,2024 14:07:00
[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Tuesday, Apr 09,2024 14:07:03
[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Tuesday, Apr 09,2024 14:07:14
[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Tuesday, Apr 09,2024 14:07:20
[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Tuesday, Apr 09,2024 14:07:22
[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Tuesday, Apr 09,2024 14:07:32
[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Tuesday, Apr 09,2024 14:08:23
[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Tuesday, Apr 09,2024 14:08:38
[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Tuesday, Apr 09,2024 14:08:55
[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Tuesday, Apr 09,2024 14:10:47
[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Tuesday, Apr 09,2024 14:11:01
[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Tuesday, Apr 09,2024 14:11:11
[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Tuesday, Apr 09,2024 14:11:21
[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Tuesday, Apr 09,2024 14:12:28
[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Tuesday, Apr 09,2024 14:12:39
[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Tuesday, Apr 09,2024 14:12:51
Oddity #2: 18 DHCP requests from the other RBS in a span of 5 minutes that overlaps the first oddity:
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:02:10
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:02:16
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:02:23
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:03:51
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:03:53
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:03:55
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:03:59
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:04:02
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:04:04
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:04:15
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:05:42
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:06:29
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:07:00
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:07:01
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:07:13
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:07:19
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:07:21
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:07:28
Oddity #3 - same RBS as Oddity 2, just ~20 minutes later: 12 more DHCP requests in a span of 5 minutes:
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:02:10
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:02:16
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:02:23
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:03:51
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:03:53
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:03:55
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:03:59
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:04:02
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:04:04
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:04:15
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:05:42
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:06:29
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:07:00
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:07:01
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:07:13
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:07:19
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:07:21
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 14:07:28
Oddity #4 - same RBS, about 30 minutes later - 9 requests in a span of 13 minutes.
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 15:01:58
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 15:11:33
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 15:11:44
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 15:11:54
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 15:12:05
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 15:13:44
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 15:13:57
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 15:14:07
[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Tuesday, Apr 09,2024 15:14:17
So what could be causing this? All looks fine on the network (no restarts, hop count is 1, memory usage of RBR/RBS is stable, CPU % of RBR/RBS is low and stable)...
Re: DHCP requests from Satelllites in a flurry! Why?
Look at the switch LEDs are they always costantly blinking when this happens or randomly blinking? Random should be seen. If constantly blinking, this is an arp storm.
