I am trying to extract specific info from a DHCP syslog generated from an XGS3100, 1 log per day for 253 IP's for the last 50 days, masses of data.
What I am trying to find out is, can the log tell me when a given IP was 'last seen' or would that be when an IP address no longer renews?
With 253 reserved addresses and without expanding the subnet, hoping to remove some un-needed IP's/MAC's.
Has anyone needed to do a similar exercise? Any inspiration would be appreciated.
I guess an alternative would be to remove all reservations, let any leases naturally expire and see what's left.