Re: Down with DHCP!!!!

["Brian Loe" <knobdy () gmail com>]

Since twenty people asked off-list, I'll just tell you that the
software we're currently using for logging/tracking of MAC/IPs is
Cacti (cacti.org I believe) and the add-on called "MacTrack".

The desktop group here actually uses their AV software to detect rogue
computers - scanning machines to verify the AV software is installed
and has the latest definitions (obviously, if it doesn't, it's not one
of theirs). This isn't free.

On 2/21/06, Brian Loe <knobdy () gmail com> wrote:
> I would make jokes about your last comment, but I'm too weirded out by
> this whole thread to even try. The company I work for, which is hardly
> at the forefront of security, can tell you when a new machine is added
> to the network, the instant it is added. Very soon, we'll be
> implementing port security on all of our switches and a centralized
> log server to gather data from every device on our network.
>
> Your reasons for wanting to dump DHCP are as flawed as the original
> poster's reasoning. Right now I can log into a FREE piece of software
> I have implemented here and tell you what MAC address had which IP
> address - for any period of time going back 2 weeks (and I could
> configure it to keep the records longer). Eventually everything will
> be getting logged in such a way that I'll be able to tell you when an
> "incident" occured, on what network, via which MAC address on which
> port of which switch...etc. I will be doing all of this with freely
> available, open source code that you could download and install right
> now...if you were in a position to do so.

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------