![]() If the first two columns in your output are a reasonable proxy for timestamps, I would take all this to mean DHCP failed temporarily, before working again and providing the host with an address.Īs a link-local address, traffic from 169.254/16 will not leave the broadcast domain, so in a forensic context, unless something happened within the broadcast domain, I would disregard it. ![]() I would tend to assume the IP was handed out via DHCP, but you would see a similar IP MAC map if it was statically assigned (you simply would not be likely to see it from a DHCP server)ġ69.254.90.183 is a link-local address ( ), which in effect means it is an autoconfigured address the machine assigned to itself when all other IP assignment mechanisms failed (typically, this would happen when a node cannot get a DHCP assignment, potentially because the DHCP server has no free IPs to hand out, or because it is busy). 192.168.1.64 is the IPv4 address the physical interface with MAC 00:1f:f3:5a:77:9b is using. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |