RE: How to find a changing IP on ethernet network

["Hagen, Eric" <ehagen () DenverNewspaperAgency com>]

Find out his MAC address.  Since you're on a switched network, you can
easily sniff for his MAC address anywhere on the network.  Once you have
that, you can set up a sniffer with a filter to find his current IP address
whenever he is broadcasting traffic.  Once you have that, you can usually
find his computer name and possibly some NetBIOS information, which usually
includes his username on that computer.

> From there it's often trivial to find the user's computer and it's often
very difficult.  How you do it depends a lot on your network topography.

Eric

-----Original Message-----
From: Ivan Andres Hernandez Puga
[mailto:ivan.hernandez () globalsis com ar]
Sent: Friday, February 20, 2004 7:54 AM
To: security-basics () securityfocus com
Subject: How to find a changing IP on ethernet network


Hello. I have a client with a simple Ethernet network with HUB's 
connecting and there is one person that is changing it's IP and creating 
conflicts. What would you do to track down that person? i mean, to find 
who does that?
Thanks!
Ivan Hernandez


---------------------------------------------------------------------------
Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection

Protect your network with the comprehensive security solution that
integrates six applications for ease of use and lower TCO.

Firewall - Virus protection - Spam protection - URL blocking - VPN
- Wireless security.

Download 30-day evaluation at:
http://www.securityfocus.com/sponsor/Astaro_security-basics_040219
----------------------------------------------------------------------------

---------------------------------------------------------------------------
Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection

Protect your network with the comprehensive security solution that
integrates six applications for ease of use and lower TCO.

Firewall - Virus protection - Spam protection - URL blocking - VPN
- Wireless security.

Download 30-day evaluation at:
http://www.securityfocus.com/sponsor/Astaro_security-basics_040219
----------------------------------------------------------------------------