Very helpful. Thanks. I should have thought of that. :-) Of course, all the switches would have the MAC address in their cam (bridging) table if they had sent to it, but if all of them but one have the MAC address associated with a trunk, and one has it associated with an end-user access port, then we would at least know which switch is actually connecting the device. And from what I know about this network, that would help identify the school at least. I think each school has its own switch.
The other suggestions are very helpful too. I'll let you know how we succeed. Thanks everyone for your help. Priscilla Daniel Cotts wrote: > > Using Cisco gear I go to a router's arp table which also tells > me the > interface from which it learned the mac address. > Then I go to the attached switch(es) and search for the mac and > its > associated interface. > Cat5k> sh cam xx-xx-xx-xx-xx-xx > Cat2924# sh mac-address-table address xxxx.yyyy.zzzz > If I haven't been smart enough to add a port name or > description line then > it's wire tracing time. > > In your case I'll assume that there is one site that is the > hub. From there > can you determine which remote site has the offending computer? > If the > remote site has switches into which you can telnet you could > narrow it down. > If cascading hubs - ouch! > > > -----Original Message----- > > From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]] > > Sent: Friday, December 06, 2002 12:23 PM > > To: [EMAIL PROTECTED] > > Subject: OT finding station trying to become MasterBrowser > [7:58701] > > > > > > I don't think there's any answer to this, but I thought I > > would check. How > > can I find the physical location of a system if I know the > following: > > > > NetBIOS name, IP address, MAC Address, and the Domain it is > > attached too. > > > > I have a system that is trying to become the Master Browser > and I've > > discovered all of the above information. The problem is, it's > > a large flat > > network, so the IP address comes from a huge pool and doesn't > > help identify > > a network segment. The NetBIOS name isn't helpful and the > > vendor code in the > > MAC address is shared by almost all the systems. > > > > Any utilities that you know of that could help find this > station? > > > > It's a city-wide school system and driving around from school > > to school > > isn't practical, although it is a rather small city... :-) > > > > Any info would be great. Thanks. > > > > Priscilla > > Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=58714&t=58701 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
