Infoblox DHCP Test

In Infoblox, DHCP (Dynamic Host Configuration Protocol) is a core network service that dynamically assigns IP addresses and network configuration settings to client devices on a network. Infoblox enhances standard DHCP services by adding centralized management, automation, visibility, and security features integrating DHCP with DNS and IPAM (IP Address Management) into a unified DDI platform.

This test monitors the target Infoblox appliance, and reports if any changeover occurred in the DHCP server. In addition, this test helps the administrators to understand if there is a spike in the DHCP discover messages or DHCP Request messages and take corrective actions.

Target of the test : An Infoblox appliance

Agent deploying the test : An external agent

Outputs of the test : One set of results for the Infoblox appliance that is to be monitored.

Configurable parameters for the test
Parameter	Description
Test Period	How often should the test be executed.
Host	The IP address of the Infoblox appliance for which this test is to be configured.
Log Path	By default, the eG agent reads the syslog file of the target Infoblox appliance to obtain the relevant metrics of this test. Therefore, specify the full path of the syslog file of the target Infoblox appliance here. For example, if your syslog file is named as messages-20250611 and is available in C:\Temp folder, then, your specification should be:C:\Temp\messages-20250611.
Is Debug Enabled	By default, this flag is set to No. If you wish to obtain troubleshooting logs for this test, then, set this flag to Yes. The troubleshooting log with the naming convention <Component Name_Internal name of the test>.log will be created in the <eG_INSTALL_DIR>\agant\logs folder once the test starts reporting metrics.
Detailed Diagnosis	To make diagnosis more efficient and accurate, the eG Enterprise embeds an optional detailed diagnostic capability. With this capability, the eG agents can be configured to run detailed, more elaborate tests as and when specific problems are detected. To enable the detailed diagnosis capability of this test for a particular server, choose the On option. To disable the capability, click on the Off option. The option to selectively enable/disable the detailed diagnosis capability will be available only if the following conditions are fulfilled: The eG manager license should allow the detailed diagnosis capability Both the normal and abnormal frequencies configured for the detailed diagnosis measures should not be 0.

Measurements made by the test

Measurement

Description

Measurement Unit

Interpretation

Is DHCP server changeover occurred?

Indicates whether/not any changeover occurred in this DHCP server.

The values reported by this measure and their numeric equivalents are available in the table below:

Measure Value	Numeric Value
No	0
Yes	1

Note:

This measure reports the Measure Values listed in the table above to indicate whether/not any changeover occurred in this DHCP server. However, in the graph, this measure is indicated using the Numeric Values listed in the above table.

Use the detailed diagnosis of this measure to find out the previous and new DHCP server name.

Total requests

Indicates the total number of requests received by this DHCP server.

Number

DHCP discovers

Indicates the number of clients trying to join the network.

Number

A DHCP Discover is the first message sent by a client device when it connects to a network and needs an IP address.

A spike in DHCP discover messages may indicate an influx of new devices or reboots. Sudden surges could also signal network issues or even security events like DHCP starvation attacks.

Use the detailed diagnosis of this measure to find out the MAC address of the client, IP address of the client, type of the DHCP request, and the date and time of the DHCP request logged in syslog.

DHCP requests

Indicates the number of DHCP Request messages from clients, either requesting a new IP lease or renewing an existing one.

Number

Excessive DHCP Requests could indicate network loops, rogue clients, or denial-of-service attempts.

Use the detailed diagnosis of this measure to find out the MAC address of the client, IP address of the client, type of the DHCP request, and the date and time of the DHCP request logged in syslog.