.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.32
.\"
.\" Standard preamble:
.\" ========================================================================
.de Sh \" Subsection heading
.br
.if t .Sp
.ne 5
.PP
\fB\\$1\fR
.PP
..
.de Sp \" Vertical space (when we can't use .PP)
.if t .sp .5v
.if n .sp
..
.de Vb \" Begin verbatim text
.ft CW
.nf
.ne \\$1
..
.de Ve \" End verbatim text
.ft R
.fi
..
.\" Set up some character translations and predefined strings.  \*(-- will
.\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left
.\" double quote, and \*(R" will give a right double quote.  | will give a
.\" real vertical bar.  \*(C+ will give a nicer C++.  Capital omega is used to
.\" do unbreakable dashes and therefore won't be available.  \*(C` and \*(C'
.\" expand to `' in nroff, nothing in troff, for use with C<>.
.tr \(*W-|\(bv\*(Tr
.ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p'
.ie n \{\
.    ds -- \(*W-
.    ds PI pi
.    if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch
.    if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\"  diablo 12 pitch
.    ds L" ""
.    ds R" ""
.    ds C` ""
.    ds C' ""
'br\}
.el\{\
.    ds -- \|\(em\|
.    ds PI \(*p
.    ds L" ``
.    ds R" ''
'br\}
.\"
.\" If the F register is turned on, we'll generate index entries on stderr for
.\" titles (.TH), headers (.SH), subsections (.Sh), items (.Ip), and index
.\" entries marked with X<> in POD.  Of course, you'll have to process the
.\" output yourself in some meaningful fashion.
.if \nF \{\
.    de IX
.    tm Index:\\$1\t\\n%\t"\\$2"
..
.    nr % 0
.    rr F
.\}
.\"
.\" For nroff, turn off justification.  Always turn off hyphenation; it makes
.\" way too many mistakes in technical documents.
.hy 0
.if n .na
.\"
.\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2).
.\" Fear.  Run.  Save yourself.  No user-serviceable parts.
.    \" fudge factors for nroff and troff
.if n \{\
.    ds #H 0
.    ds #V .8m
.    ds #F .3m
.    ds #[ \f1
.    ds #] \fP
.\}
.if t \{\
.    ds #H ((1u-(\\\\n(.fu%2u))*.13m)
.    ds #V .6m
.    ds #F 0
.    ds #[ \&
.    ds #] \&
.\}
.    \" simple accents for nroff and troff
.if n \{\
.    ds ' \&
.    ds ` \&
.    ds ^ \&
.    ds , \&
.    ds ~ ~
.    ds /
.\}
.if t \{\
.    ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u"
.    ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u'
.    ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u'
.    ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u'
.    ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u'
.    ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u'
.\}
.    \" troff and (daisy-wheel) nroff accents
.ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V'
.ds 8 \h'\*(#H'\(*b\h'-\*(#H'
.ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#]
.ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H'
.ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u'
.ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#]
.ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#]
.ds ae a\h'-(\w'a'u*4/10)'e
.ds Ae A\h'-(\w'A'u*4/10)'E
.    \" corrections for vroff
.if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u'
.if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u'
.    \" for low resolution devices (crt and lpr)
.if \n(.H>23 .if \n(.V>19 \
\{\
.    ds : e
.    ds 8 ss
.    ds o a
.    ds d- d\h'-1'\(ga
.    ds D- D\h'-1'\(hy
.    ds th \o'bp'
.    ds Th \o'LP'
.    ds ae ae
.    ds Ae AE
.\}
.rm #[ #] #H #V #F C
.\" ========================================================================
.\"
.IX Title "dhcpstarv 1"
.TH dhcpstarv 1 "2008-03-04" "version 0.1.0" "dhcpstarv manual"
.SH "NAME"
dhcpstarv \- DHCP starvation attack.
.SH "SYNOPSIS"
.IX Header "SYNOPSIS"
dhcpstarv \-h
.PP
dhcpstarv [\-epv] [\-d \s-1MAC\s0] \-i \s-1IFNAME\s0
.SH "OPTIONS"
.IX Header "OPTIONS"
.IP "\fB\-d\fR, \fB\-\-dstmac\fR=\fI\s-1MAC\s0\fR" 8
.IX Item "-d, --dstmac=MAC"
Use \fI\s-1MAC\s0\fR as destination hardware address for \s-1DHCP\s0 requests. Default is to use
broadcast address.
.IP "\fB\-e\fR, \fB\-\-exclude\fR=\fI\s-1ADDRESS\s0\fR" 8
.IX Item "-e, --exclude=ADDRESS"
Ignore replies from server with \s-1IP\s0 address \fI\s-1ADDRESS\s0\fR. This must be valid \s-1IP\s0
address \s-1DHCP\s0 server include in replies as server \s-1ID\s0. Usually this is a primary
\&\s-1IP\s0 address of interface which is connected to client's network segment.
.IP "\fB\-h\fR, \fB\-\-help\fR" 8
.IX Item "-h, --help"
Print help and exit.
.IP "\fB\-i\fR, \fB\-\-ifname\fR=\fI\s-1IFNAME\s0\fR" 8
.IX Item "-i, --ifname=IFNAME"
Send requests and receive responses on network interface \fI\s-1IFNAME\s0\fR.
.IP "\fB\-p\fR, \fB\-\-no\-promisc\fR" 8
.IX Item "-p, --no-promisc"
Do not set network interface to promiscuous mode. Some servers send replies to
hardware address stored in \s-1DHCP\s0 options in spite of broadcast option presence,
in which case this option cause \fBdhcpstarv\fR not to receive server replies.
.IP "\fB\-v\fR, \fB\-\-verbose\fR" 8
.IX Item "-v, --verbose"
Print verbose messages.
.SH "DESCRIPTION"
.IX Header "DESCRIPTION"
\&\s-1DHCP\s0 starvation is attacking a \s-1DHCP\s0 server by sending a lot of requests to it.
This lead to server's address pool exhausting after which \s-1DHCP\s0 server is not
able to respond clients and give them new leases.
.PP
\&\fBdhcpstarv\fR is tool that implements \s-1DHCP\s0 starvation attack. It requests \s-1DHCP\s0
leases on specified interface, save them and renew on regular basis.
.PP
When a rogue \s-1DHCP\s0 server appear in network with \s-1DHCP\s0 infrastructure some clients
can get wrong network settings. Those rogue servers can be switched by users by
accident. The only solution to issue is to disconnect such server from network.
But it takes a lot of time to discover rogue server if network is complicated,
i.e. there are many network devices in it. As a temporary solution you can
attack rogue \s-1DHCP\s0 server until find and disconnect it from network.
.SH "COPYRIGHT"
.IX Header "COPYRIGHT"
Copyright (C) 2007 Dmitry Davletbaev
.PP
This program is licenced under \s-1GNU\s0 General Public License version 3.
.PP
This program comes with \s-1ABSOLUTELY\s0 \s-1NO\s0 \s-1WARRANTY\s0. This is free software, and you
are welcome to redistribute it under certain conditions; see
<http://www.gnu.org/licenses/> for details.