I would start looking in the ARP caches of my various devices. I would also
filter that NIC out with ACL's, and wait to see who calls...
Wes
-----Original Message-----
From: AEHeald
To: '[EMAIL PROTECTED]' '
Sent: 2/20/2001 2:04 PM
Subject: Would anyone know
Hello all;
I have lurked on this list for a year plus and learned a great deal from
all
of you.
Right now I am trying to track down a machine(s) and only have the NIC
address as a locator. This is an NT/Netbios network. (All booing should
be
considered heard and agreed with) and I need to find out the machine
which
is attempting to perpetrate an external DDOS from behind my firewall.
Please let me know your thoughts.
Arian Heald
Sr. Systems Engineer
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
