sudo ifconfig ethX promisc
tshark -i ethX -n port 68 -R 'bootp.type == 2'
Thanks to http://blog.siufatfat.net/2013/08/25/locating-rogue-dhcp-on-linux/
sudo ifconfig ethX promisc
tshark -i ethX -n port 68 -R 'bootp.type == 2'
Thanks to http://blog.siufatfat.net/2013/08/25/locating-rogue-dhcp-on-linux/
Using “dd” inside of OSX I was able to copy the affected disk bit by bit to an image file and then convert that file to a readable format for OSX to mount:
1. Get device ID of disk via
"diskutil list"
then created the image via:
dd bs=512 if=/dev/XXX of=/some_dir/foo.dmg conv=noerror,sync
2. Next I converted the .dmg to an img for mounting via
hdiutil convert input.dmg -format UDTO -o output.img