DHCP can be one of the most useful data sources for an endpoint device. A primary use of DHCP in profiling has been to capture the device MAC address, but it can also be used to capture other probes as well. The true value in the DHCP probe is that many other attributes can be gleaned to help identify the type of endpoint. As HTTP carries User-Agent field, DHCP requests carry a Class-Identifier field that helps identify the operating system of a device. Some organizations have been known to use a custom DHCP Class-Identifier string to help identify a device as a corporate asset.