Hi,
you should give a brief instruction of your network structure, so one can
think over it to be working on a small network or on a world wide net with
thousands of millions of clients.
This or that the strategy would be slightly different, i think.
On to
http://www.computing.net/windowsnt/w...rum/15074.html
it might be a device not "grabbing", but telling of (cached) bad ip
adresses.
Sniffing the DHCP operation on a client requesting a lease then could help
(if not at all).
You should see who ever is invoked!
jk