Nas distribuições modernas, parece
ps aux | grep dhcli | grep -v grep
root 367 0.0 0.0 16128 3076 ? S Apr30 0:00 /sbin/dhclient -d -q -sf /usr/lib/NetworkManager/nm-dhcp-helper -pf /var/run/dhclient-enp3s0.pid -lf /var/lib/NetworkManager/dhclient-324caec3-58f9-3f00-bff4-2f8bd7d2aafa-enp3s0.lease -cf /var/lib/NetworkManager/dhclient-enp3s0.conf enp3s0
tail -16 /var/lib/NetworkManager/dhclient-324caec3-58f9-3f00-bff4-2f8bd7d2aafa-enp3s0.lease
lease {
interface "enp3s0";
fixed-address 10.191.104.3;
option subnet-mask 255.255.255.0;
option routers 10.191.104.254;
option dhcp-lease-time 86400;
option dhcp-message-type 5;
option domain-name-servers 91.193.220.3,91.193.220.7;
option dhcp-server-identifier 91.193.220.3;
option ntp-servers 91.193.220.6;
option broadcast-address 10.191.104.255;
option domain-name "myISP.ru";
renew 1 2017/05/01 12:56:02;
rebind 2 2017/05/02 00:27:11;
expire 2 2017/05/02 03:27:11;
}
onde 91.193.220.7 é o servidor DNS do meu ISP
nslookup serverfault.com 91.193.220.7
Server: 91.193.220.7
Address: 91.193.220.7#53
Non-authoritative answer:
Name: serverfault.com
Address: 151.101.1.69
Name: serverfault.com
Address: 151.101.65.69
Name: serverfault.com
Address: 151.101.193.69
Name: serverfault.com
Address: 151.101.129.69