root@frm:~# nmap --script broadcast-dhcp-discover
Starting Nmap 7.95 ( https://nmap.org ) at 2025-08-11 18:37 CEST
Pre-scan script results:
| broadcast-dhcp-discover: 
|   Response 1 of 2: 
# Libratone Zipp
|     Interface: enx000ec6e25b11
|     IP Offered: 192.168.6.148
|     DHCP Message Type: DHCPOFFER
|     Server Identifier: 192.168.3.47
|     IP Address Lease Time: 2h00m00s
|     Renewal Time Value: 1h00m00s
|     Rebinding Time Value: 1h45m00s
|     Subnet Mask: 255.255.224.0
|     Broadcast Address: 192.168.3.255
|     Router: 192.168.3.47
|     Vendor Specific Information: ANDROID_METERED
# Regular DHCP server
|   Response 2 of 2: 
|     Interface: enx000ec6e25b11
|     IP Offered: 192.168.3.121
|     DHCP Message Type: DHCPOFFER
|     Server Identifier: 192.168.3.3
|     IP Address Lease Time: 3h00m00s
|     Renewal Time Value: 1h30m00s
|     Rebinding Time Value: 2h37m30s
|     Subnet Mask: 255.255.224.0
|     Broadcast Address: 192.168.3.255
|     Domain Name Server: 192.168.3.3
|     Domain Name: home.cweiske.de
|_    Router: 192.168.3.92
WARNING: No targets were specified, so 0 hosts scanned.
Nmap done: 0 IP addresses (0 hosts up) scanned in 10.13 seconds