()
| 2051 | |
| 2052 | |
| 2053 | def do_dhcp_snoop(trusted=None, untrusted=None, seconds=20): |
| 2054 | """Inline DHCP-snooping pass. Captures real DHCP off the wire per ingress |
| 2055 | port and applies the trusted/untrusted model: |
| 2056 | |
| 2057 | * any DHCP *server* message on the UNTRUSTED port -> rogue (definitive) |
| 2058 | * OFFER/ACK anywhere -> binding-table entry |
| 2059 | * many distinct chaddrs in DISCOVERs -> starvation |
| 2060 |
nothing calls this directly
no test coverage detected