Try the command 

nbtstat -A xxx.xxx.xxx.xxx

>From an 2000 box I get back the name of the computer.  That might help you
trace the machine that is giving you a problem.

Tim Donahue


-----Original Message-----
From: Blaxes [mailto:[EMAIL PROTECTED]] 
Sent: Sunday, July 14, 2002 9:44 AM
To: [EMAIL PROTECTED]
Subject: FW: Tracing physical machines on DHCP networks



Hi,

I noticed from my firewall logs that there is a particular machine on my
network generating a very huge amt of suspicious traffic. Having only the ip
address, I would like to track down the physical machine in my organization.

There are numerous machines on the network, and running on DHCP, I am having
a huge problem getting the mac address and the physical location of the
machine. To complicate the matter, there are some users sharing machines and
a user only requires authenticating via the firewall (LDAP) to access the
network. 

Is there any ip management software that logs dhcp assignments to user
logon on at the firewall with time and date stamps ?    


Thanks. 




Reply via email to