Counts DHCP packets identified as spoofed. This is a direct anti-spoofing detection counter, incrementing when the relay catches a packet whose claimed source doesn't match what's expected for that port/MAC binding, so a rising count here points an admin toward a specific client or port attempting DHCP spoofing/starvation rather than a general relay malfunction. This might spike if a compromised host on the access network starts sending DHCP packets using another subscriber's MAC address to hijack their lease.