17 Jun
2025
17 Jun
'25
5:47 a.m.
Assuming you're running ISC DHCP, the lease database is in /var/lib/dhcpd.
To find the dhcp package names, use "rpm -qa | grep -i dhcp".
To list the files a package knows about: "rpm -qlv dhcp"
Also useful is to find what files have been touched: "rpm -V dhcp"
I find it useful to verify the whole system for signs of tampering with "rpm -Va", redirected into a file.