A suggestion may 'set utmp = yes' into your smb.conf.
So, with 'w' command you could see the logged on users and their IPs.
On 11/14/06, Michael Schurter <[EMAIL PROTECTED]> wrote:
Hi,
I'm trying to figure out how to find users by IP. I'm parsing a
firewall log and would like to map internal IPs to users.
I noticed "nmblookup -A <ip>" returns interesting results:
COMPUTER <00> - M <ACTIVE>
DOMAIN <00> - <GROUP> M <ACTIVE>
COMPUTER <03> - M <ACTIVE>
COMPUTER <20> - M <ACTIVE>
DOMAIN <1e> - <GROUP> M <ACTIVE>
USERNAME <03> - M <ACTIVE>
where COMPUTER = NetBIOS computer name, DOMAIN = AD Domain Name, and
USERNAME = currently logged in user (right?).
The only problem is, how do I tell which row is the Username?
Thanks in advance!
Michael Schurter
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
--
***
Cleber P. de Souza
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
