Not knowing the router is ? Cisco, MT, etc. ? That very could be what is diabling sniffing. The aPPo can disable traffic also.
Dee On Thu, 2003-07-24 at 11:50, The Wirefree Network wrote: > T-1 Router/Firewall (all-in-one unit) <--> aPPo (headend) <--> some > clients directly off here as well as aPPo repeater (not repeater > mode--using 2 radios) <--> more clients out here. > > Entire network is sB equipment (except router). This problem is not > only affecting airBridges either. I was having the problem with the > airPoints as well...but I wirelessly used simpleDeploy on them again, > and bammo...no problems. > > Also directly off of the T-1 router/firewall is my internal LAN. All > addresses are within the same subnet. > > I would think it was a firewall problem if it weren't for all my > previous info. > > Sully > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of W.D. McKinney > Sent: Thursday, July 24, 2003 11:38 AM > To: [EMAIL PROTECTED] > Subject: Re: [smartBridges] OFF TOPIC: Spoofed IP?? > > Post the topology for connectivity between you and customer with > hardware devices and IP scheme. > > Dee > > > On Thu, 2003-07-24 at 11:29, The Wirefree Network wrote: > > Here's a weird one. > > > > Using smartbridges equipment, is there any way I can find out which > one > > of my users changed their IP address?? > > > > When I do an arp listing in my router, I noticed that the IP/MAC > pairing > > was incorrect. So...I called up the client who should have that IP > and > > their computer was off. When they turned it on and went to IE, my > > router prompted me with "IP address 172.16.x.x changed MAC addresses". > > And then the arp listing showed the correct MAC for that IP. > > > > He then turned off his computer and a little while later...I was again > > prompted with the "IP address 172.16.x.x changed MAC addresses". I > > wrote down the MAC address, but that really does me no good. > > > > I was hoping that a traceroute would show me which wireless devices he > > was hopping out of...but no dice. > > > > I looked in the associated client listing in the aPPo, but it does not > > show that IP whenever I am looking. > > > > I tried using sniffer software...but I cant pick up any traffic on the > > LAN side of my router, being that it is also a switch. I need to find > a > > way to make my port (permiscious) or act like a hub...so I can sniff > > traffic on the whole network. > > > > I also thought about having the valid client use a different IP for > > now...and then block that IP at the LAN interface. Then...just sit > back > > and wait for that client to call me (with an outage). > > > > Anyway...my question is....how can I find out who is using this IP?? > > > > Sully > > > > The PART-15.ORG smartBridges Discussion List > > To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe > smartBridges <yournickname> > > To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe > smartBridges) > > Archives: http://archives.part-15.org > > The PART-15.ORG smartBridges Discussion List > To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe > smartBridges <yournickname> > To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe > smartBridges) > Archives: http://archives.part-15.org > > The PART-15.ORG smartBridges Discussion List > To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe smartBridges > <yournickname> > To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe smartBridges) > Archives: http://archives.part-15.org The PART-15.ORG smartBridges Discussion List To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe smartBridges <yournickname> To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe smartBridges) Archives: http://archives.part-15.org
