Scanning DHCP Messages

[xpn08]

Hi all,

Pretty new to all this, I love the 'scene' thats up and running here so im keen to learn more. My motives are purely academic (I love to know how and why things work ).

I have read through the forum here aswel as a few other places but am just getting bits and bobs of information.

I'm scanning for macs using DHCPForce, I understand the theory quite well, its an active scanner listening for existing macs on my subnetwork (UBR as I see it being called) to pick up mac addresses from DHCP transactions (I hope this is correct)

My issue however is when scanning using DHCPForce (or other such DHCP tools), I am getting mac addressed but no config files (plus the TFTP server field is always blank aswel as default gateway always being 0.0.0.0).

So... I have 2 questions

1. How do I get config files to show in DHCPForce. I have firewall turned off, connected directly to my machine using ethernet cable etc.. and have scanned hundreds of macs but still nothing.

2. If I cannot find config files, could I just swap the macs blindly ?

3. Why does DHCP contain a 'config file'. If this is standard DHCP, I didn't think that an additional config file is part of the DHCP message? Is this some modified DHCP message that is sent to the virgin network?

Thanks in advance, and keep up the good work guys, its good to see an active scene.

XPN.

[xpn08]

Apologies, I now have found 2 config files just after posting this . But as guessed the config files seem to be dynamic. Does this mean that I cannot swap these macs?