Security Basics mailing list archives

RE: Identifying a computer


From: "Mike" <mike () superiorholidayadventures ca>
Date: Wed, 3 Dec 2003 16:21:07 -0500

How are you sharing your bandwidth?  Can you use this device to block
all traffic from the IP that's giving you a hard time?

Mike Fetherston

-----Original Message-----
From: Cheetah [mailto:cheetahx () online no]
Sent: Wednesday, December 03, 2003 10:38 AM
To: security-basics () securityfocus com
Subject: Identifying a computer

Hello.

I am helping the sysadmin on my local LAN to manage the network, etc.
We have limited internet-bandwidth, and therefore it is necessary to
make
sure no-one
is taking to much of the bandwidth, as others will not be able to use
the
internet connection.

For the last 2 days, a new IP has appeared, and it is constantly using
a
lot
of bandwidth.
We have a linux-server running DHCP, DNS and the internet-connection.
I
have
checked the
dhcpd.leases file, but the IP isn't there. I have also tried to ping
and
scan this IP, but the computer
is running a strong firewall, shows no open ports and doesn't even
respond
to pings.

Is there any way I can get some information out of this computer
without
running around
and asking everyone what their IP is?

Tore




------------------------------------------------------------------------
--
-

------------------------------------------------------------------------
--
--


---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: