if you're looking to spoof a dhcp session you might want to just hack
a dhcp server to behave appropriately.  on freebsd you can open a bpf
device and see what's coming down the line. this is in fact how the
dhcp server work iirc - setting up a dhcp packet filter and handling
the events appropriately. 

when last we saw our hero (Sunday, Jun 30, 2002), 
 twakefield at stcloudstate.edu was madly tapping out:
> To troubleshoot a network problem, I want to transmit an Ethernet
> packet after receiving a specific packet. Basically I will be
> simulating a DHCP transaction. The transmitted packet will
> be edited versions of a captured packet. What is the easiest way
> to do this?
> 

-- 
steve ulrich                       sulrich at botwerks.org
PGP: 8D0B 0EE9 E700 A6CF ABA7  AE5F 4FD4 07C9 133B FAFC