whenever a broadcast packet is sent by a box request for an IP, a DHCP server a resonse acknowledging the request. Any packet sniffing tool like tcpdump or wireshark can capture those packets and report about them. So if u could write a script to chk those we hav a monitoring script in place to find unsolicited DHCP servers in your network...
:) :)


