Re: OT finding station trying to become MasterBrowser [7:58701]
Hi There is a software called 3com network supervisor which is freely downloadable from 3com website. This software automatically generates a map of all connecting devices upto workstations. If you need more details, find out on 3com website. If you are having any doubts, please feel free to contact me. Thanks/Regards, K.Srinivas - Original Message - From: Priscilla Oppenheimer To: Sent: Friday, December 06, 2002 11:52 PM Subject: OT finding station trying to become MasterBrowser [7:58701] I don't think there's any answer to this, but I thought I would check. How can I find the physical location of a system if I know the following: NetBIOS name, IP address, MAC Address, and the Domain it is attached too. I have a system that is trying to become the Master Browser and I've discovered all of the above information. The problem is, it's a large flat network, so the IP address comes from a huge pool and doesn't help identify a network segment. The NetBIOS name isn't helpful and the vendor code in the MAC address is shared by almost all the systems. Any utilities that you know of that could help find this station? It's a city-wide school system and driving around from school to school isn't practical, although it is a rather small city... :-) Any info would be great. Thanks. Priscilla Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=58776t=58701 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: OT finding station trying to become MasterBrowser [7:58701]
Since the client does support NetBIOS, you could try using net send at the command line of another client to send a message to the user by computer name and ask them to call the support desk. Of course if it's a Windows 9x client they would have to be running Winpopup to receive your message. You could also use the remote shutdown utility from Microsoft to reboot the computer in x minutes and send a message along with a reason which again could be contact the support desk. -Original Message- From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]] Sent: Friday, December 06, 2002 11:23 AM To: [EMAIL PROTECTED] Subject: OT finding station trying to become MasterBrowser [7:58701] I don't think there's any answer to this, but I thought I would check. How can I find the physical location of a system if I know the following: NetBIOS name, IP address, MAC Address, and the Domain it is attached too. I have a system that is trying to become the Master Browser and I've discovered all of the above information. The problem is, it's a large flat network, so the IP address comes from a huge pool and doesn't help identify a network segment. The NetBIOS name isn't helpful and the vendor code in the MAC address is shared by almost all the systems. Any utilities that you know of that could help find this station? It's a city-wide school system and driving around from school to school isn't practical, although it is a rather small city... :-) Any info would be great. Thanks. Priscilla Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=58705t=58701 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: OT finding station trying to become MasterBrowser [7:58701]
When I have this situation I usually found the interface of the switch with the command show cam H.H.H. When it ends up in a hub, that is a problem. The only solution is a ping/disconnect cable combination. Priscilla Oppenheimer @groupstudy.com em 06/12/2002 15:22:50 Favor responder a Priscilla Oppenheimer Enviado Por: [EMAIL PROTECTED] Para: [EMAIL PROTECTED] cc: Assunto:OT finding station trying to become MasterBrowser [7:58701] I don't think there's any answer to this, but I thought I would check. How can I find the physical location of a system if I know the following: NetBIOS name, IP address, MAC Address, and the Domain it is attached too. I have a system that is trying to become the Master Browser and I've discovered all of the above information. The problem is, it's a large flat network, so the IP address comes from a huge pool and doesn't help identify a network segment. The NetBIOS name isn't helpful and the vendor code in the MAC address is shared by almost all the systems. Any utilities that you know of that could help find this station? It's a city-wide school system and driving around from school to school isn't practical, although it is a rather small city... :-) Any info would be great. Thanks. Priscilla Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=58706t=58701 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: OT finding station trying to become MasterBrowser [7:58701]
You could use a program called retina security scanner (download a trial version from http://www.eeye.com/html/Products/Retina/Download.html) or GFI LanGuard at http://www.gfi.com/downloads/downloads.asp?pid=8vid=1lid=1. These will allow you to get more information such as users, service packs, last time users logged in, vulnerability and so on. This will help you narrow it down. You also can get registry information believe it or not. Andrew -Original Message- From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]] Sent: Friday, December 06, 2002 1:23 PM To: [EMAIL PROTECTED] Subject: OT finding station trying to become MasterBrowser [7:58701] I don't think there's any answer to this, but I thought I would check. How can I find the physical location of a system if I know the following: NetBIOS name, IP address, MAC Address, and the Domain it is attached too. I have a system that is trying to become the Master Browser and I've discovered all of the above information. The problem is, it's a large flat network, so the IP address comes from a huge pool and doesn't help identify a network segment. The NetBIOS name isn't helpful and the vendor code in the MAC address is shared by almost all the systems. Any utilities that you know of that could help find this station? It's a city-wide school system and driving around from school to school isn't practical, although it is a rather small city... :-) Any info would be great. Thanks. Priscilla Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=58707t=58701 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: OT finding station trying to become MasterBrowser [7:58701]
If it is a switched network, flood the IP in question after hours and look at the switches for the port with all the traffic. If there are no switches, then you will have to narrow it down to an individual hub and then look at that group of workstaions. I'm sure there is a more technical answer to this. -Original Message- From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]] Sent: Friday, December 06, 2002 12:23 PM To: [EMAIL PROTECTED] Subject: OT finding station trying to become MasterBrowser [7:58701] I don't think there's any answer to this, but I thought I would check. How can I find the physical location of a system if I know the following: NetBIOS name, IP address, MAC Address, and the Domain it is attached too. I have a system that is trying to become the Master Browser and I've discovered all of the above information. The problem is, it's a large flat network, so the IP address comes from a huge pool and doesn't help identify a network segment. The NetBIOS name isn't helpful and the vendor code in the MAC address is shared by almost all the systems. Any utilities that you know of that could help find this station? It's a city-wide school system and driving around from school to school isn't practical, although it is a rather small city... :-) Any info would be great. Thanks. Priscilla Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=58710t=58701 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: OT finding station trying to become MasterBrowser [7:58701]
Using Cisco gear I go to a router's arp table which also tells me the interface from which it learned the mac address. Then I go to the attached switch(es) and search for the mac and its associated interface. Cat5k sh cam xx-xx-xx-xx-xx-xx Cat2924# sh mac-address-table address .. If I haven't been smart enough to add a port name or description line then it's wire tracing time. In your case I'll assume that there is one site that is the hub. From there can you determine which remote site has the offending computer? If the remote site has switches into which you can telnet you could narrow it down. If cascading hubs - ouch! -Original Message- From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]] Sent: Friday, December 06, 2002 12:23 PM To: [EMAIL PROTECTED] Subject: OT finding station trying to become MasterBrowser [7:58701] I don't think there's any answer to this, but I thought I would check. How can I find the physical location of a system if I know the following: NetBIOS name, IP address, MAC Address, and the Domain it is attached too. I have a system that is trying to become the Master Browser and I've discovered all of the above information. The problem is, it's a large flat network, so the IP address comes from a huge pool and doesn't help identify a network segment. The NetBIOS name isn't helpful and the vendor code in the MAC address is shared by almost all the systems. Any utilities that you know of that could help find this station? It's a city-wide school system and driving around from school to school isn't practical, although it is a rather small city... :-) Any info would be great. Thanks. Priscilla Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=58711t=58701 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: OT finding station trying to become MasterBrowser [7:58701]
Probably won't help you in this situation, but in CiscoWorks 2000, there is a feature in Campus Manager called User Tracking that associates a UserName with a MAC Address and with a Device/Port combination. Has saved my bacon in several cases similar to yours. Assuming it's Cisco gear, you could also start at the core switch and do either a 'show cam dynamic' or a 'show mac-address-table' and try to follow the uplinks until you end up at an access port with your MAC address Good Luck! Frank Jimenez, CCIE #5738 Systems Engineer Cisco Systems, Inc. [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Friday, December 06, 2002 12:23 PM To: [EMAIL PROTECTED] Subject: OT finding station trying to become MasterBrowser [7:58701] I don't think there's any answer to this, but I thought I would check. How can I find the physical location of a system if I know the following: NetBIOS name, IP address, MAC Address, and the Domain it is attached too. I have a system that is trying to become the Master Browser and I've discovered all of the above information. The problem is, it's a large flat network, so the IP address comes from a huge pool and doesn't help identify a network segment. The NetBIOS name isn't helpful and the vendor code in the MAC address is shared by almost all the systems. Any utilities that you know of that could help find this station? It's a city-wide school system and driving around from school to school isn't practical, although it is a rather small city... :-) Any info would be great. Thanks. Priscilla Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=58712t=58701 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: OT finding station trying to become MasterBrowser [7:58701]
How about setting another machine to that IP address and wait to see who gets the conflict message? Mark Forwarded Message: To: [EMAIL PROTECTED] From: Frank Jimenez Subject: RE: OT finding station trying to become MasterBrowser [7:58701] Date: Fri, 6 Dec 2002 19:36:28 GMT - Probably won't help you in this situation, but in CiscoWorks 2000, there is a feature in Campus Manager called User Tracking that associates a UserName with a MAC Address and with a Device/Port combination. Has saved my bacon in several cases similar to yours. Assuming it's Cisco gear, you could also start at the core switch and do either a 'show cam dynamic' or a 'show mac-address-table' and try to follow the uplinks until you end up at an access port with your MAC address Good Luck! Frank Jimenez, CCIE #5738 Systems Engineer Cisco Systems, Inc. [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Friday, December 06, 2002 12:23 PM To: [EMAIL PROTECTED] Subject: OT finding station trying to become MasterBrowser [7:58701] I don't think there's any answer to this, but I thought I would check. How can I find the physical location of a system if I know the following: NetBIOS name, IP address, MAC Address, and the Domain it is attached too. I have a system that is trying to become the Master Browser and I've discovered all of the above information. The problem is, it's a large flat network, so the IP address comes from a huge pool and doesn't help identify a network segment. The NetBIOS name isn't helpful and the vendor code in the MAC address is shared by almost all the systems. Any utilities that you know of that could help find this station? It's a city-wide school system and driving around from school to school isn't practical, although it is a rather small city... :-) Any info would be great. Thanks. Priscilla Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=58715t=58701 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: OT finding station trying to become MasterBrowser [7:58701]
Along with MAC tracing, using CDP to id next-hop switches, etc. you can also try to us something like psloggedon (or psshutdown if you have something of a mean-streak) from sysinternals.com. OR - if your domain is logging successful logins, maybe you could look through them to see who is logging in from that machine. ... get the user's name, send them a friendly request to modify their system accordingly. Or, if their policies permit, you could always sniff traffic from their IP looking for login names. May require some SPANning or 'traffic engineering' to get their packets to you ... (sorry the first couple weren't more 'network oriented' answers :)) Please let us know what you find / how you find it ... Thanks! TJ -Original Message- From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]] Sent: Friday, December 06, 2002 1:23 PM To: [EMAIL PROTECTED] Subject: OT finding station trying to become MasterBrowser [7:58701] I don't think there's any answer to this, but I thought I would check. How can I find the physical location of a system if I know the following: NetBIOS name, IP address, MAC Address, and the Domain it is attached too. I have a system that is trying to become the Master Browser and I've discovered all of the above information. The problem is, it's a large flat network, so the IP address comes from a huge pool and doesn't help identify a network segment. The NetBIOS name isn't helpful and the vendor code in the MAC address is shared by almost all the systems. Any utilities that you know of that could help find this station? It's a city-wide school system and driving around from school to school isn't practical, although it is a rather small city... :-) Any info would be great. Thanks. Priscilla ** The information in this email is confidential and may be legally privileged. Access to this email by anyone other than the intended addressee is unauthorized. If you are not the intended recipient of this message, any review, disclosure, copying, distribution, retention, or any action taken or omitted to be taken in reliance on it is prohibited and may be unlawful. If you are not the intended recipient, please reply to or forward a copy of this message to the sender and delete the message, any attachments, and any copies thereof from your system. ** Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=58717t=58701 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: OT finding station trying to become MasterBrowser [7:58701]
I would suspect a Linux box somewhere on your net that has a new Samba install on it. The default configuration is set for the box to attempt to be the Master Browser. A tool like NMAP will help you identify the type of device you're dealing with, this could help in a process of elimination, otherwise ARP and CAM tables will find it, assuming you have switches and not hubs... - Original Message - From: Priscilla Oppenheimer To: Sent: Friday, December 06, 2002 12:22 PM Subject: OT finding station trying to become MasterBrowser [7:58701] I don't think there's any answer to this, but I thought I would check. How can I find the physical location of a system if I know the following: NetBIOS name, IP address, MAC Address, and the Domain it is attached too. I have a system that is trying to become the Master Browser and I've discovered all of the above information. The problem is, it's a large flat network, so the IP address comes from a huge pool and doesn't help identify a network segment. The NetBIOS name isn't helpful and the vendor code in the MAC address is shared by almost all the systems. Any utilities that you know of that could help find this station? It's a city-wide school system and driving around from school to school isn't practical, although it is a rather small city... :-) Any info would be great. Thanks. Priscilla Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=58742t=58701 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
