RE: How to find a changing IP on ethernet network

["Bruyere, Michel" <mbruyere () ezemcanada com>]

Hi, 
        IMO my best bet would be to look at the ARP traffic using ethereal
then use NBTSTAT -A The_ip when you see the Ip change. This will give you
the session name used on the computer (supposing, it's a windows system)

M.Bruyere



> Hello. I have a client with a simple Ethernet network with HUB's 
> connecting and there is one person that is changing it's IP and 
> creating conflicts. What would you do to track down that person? i 
> mean, to find who does that? Thanks!
> Ivan Hernandez



> -----Original Message-----
> From: Bénoni MARTIN [mailto:Benoni.MARTIN () libertis ga]
> Sent: lundi 23 février 2004 04:56
> To: Ivan Andres Hernandez Puga; security-basics () securityfocus com
> Subject: RE: How to find a changing IP on ethernet network
>
> Hi,
>
> The person should also be warned on his(her) screen about the IP address
> trouble, but according to your statements, it does not seem to bother
> her:(.
>
> The way I would deal with this trouble is tracking down the MAC address
> and/or name of the computer, and then try to find the computer with that.
>
> But it will depend on many things: DHCP or not? How many computers do you
> have connected to the hub? Do you have an up-to-date list of the MAC
> addresses, ...?
>
>
>
> -----Message d'origine-----
> De : Ivan Andres Hernandez Puga [mailto:ivan.hernandez () globalsis com ar]
> Envoyé : vendredi 20 février 2004 15:54
> À : security-basics () securityfocus com
> Objet : How to find a changing IP on ethernet network
>
> Hello. I have a client with a simple Ethernet network with HUB's
> connecting and there is one person that is changing it's IP and creating
> conflicts. What would you do to track down that person? i mean, to find
> who does that?
> Thanks!
> Ivan Hernandez
---------------------------------------------------------------------------
> Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection
>
> Protect your network with the comprehensive security solution that
> integrates six applications for ease of use and lower TCO.
>
> Firewall - Virus protection - Spam protection - URL blocking - VPN
> - Wireless security.
>
> Download 30-day evaluation at:
> http://www.securityfocus.com/sponsor/Astaro_security-basics_040219
---------------------------------------------------------------------------
> -
---------------------------------------------------------------------------
> Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection
>
> Protect your network with the comprehensive security solution that
> integrates six applications for ease of use and lower TCO.
>
> Firewall - Virus protection - Spam protection - URL blocking - VPN
> - Wireless security.
>
> Download 30-day evaluation at:
> http://www.securityfocus.com/sponsor/Astaro_security-basics_040219
---------------------------------------------------------------------------
> -

---------------------------------------------------------------------------
----------------------------------------------------------------------------