I cam in this morning to myriad network issues.
devices dropping off network from time to time, others not getting dhcp address.
checked all my HP switches, found no real errors, no broadcast storms.
logged into my fortigate box, and saw a ton of DHCP broadcast that stops as soon as I kill dhcp on my windows 2003 server.
these are all on my LAN port on the fortigate box.
never have see this in the logs before, what the heck would be causing this?
why would the source be 0.0.0.0?
I have ended and started the dhcp service, the 2003 server itself is not reporting any issues on event viewer, nothing in dhcp.
here is what I see in the fortigate logs:
Level warning
Status [deny]
Src 0.0.0.0
Dst 255.255.255.255
Sent 0 B
Received 0 B
Subtype other
VDom root
Serial Number 55857
Duration 0
User N/A
Group N/A
Rule 0
Policy ID 0
Protocol 17
Service DHCP
Device Time 2014-01-13 12:06:41
Src Name 0.0.0.0
Dst Name 255.255.255.255
Src Interface port15
Dst Interface N/A
Log ID 7
Src Port 68
Dst Port 67
VPN N/A
Carrier End Point N/A
Application Type N/A
Application N/A
Application Category N/A
Shaper Dropped Sent Bytes 0
Shaper Dropped Received Bytes 0
Sent Traffic Shaper Name N/A
Rcvd Traffic Shaper Name N/A
Per-IP Shaper Name N/A
Per-IP Shaper Bytes Dropped 0
Destination Country Reserved
Message reverse path check fail, drop
Identity Index 0
VPN Tunnel N/A
Profile Group Name N/A
