Rogue DHCP in your network

atpitude install dhcp_probe
become root!
dhcp_probe -f -o /home/user/dhcp.pcap eth0

or search in vlans!

dhcp_probe -f -o /home/user/dhcp.pcap eth0 -Q <vlan-id>