Re: How to find a changing IP on ethernet network

["GUs" <rootz () fibertel com ar>]

Ivan:
If someone is changing the IP, maybe you can try with some DHCP server over
the LAN. That's first.
But thinking more deeply, to track him or her, in theory, if you have one
machine with an arp table refreshing all the IP/MAC associated, then, when
one ip changes, it is  simple to recognize the mac associated to it. I hope
this helps.
Because in theory, only IP changes, MAC doesn't.
I said in theory .

Gustavo Tazzoli.
Linux user
Sys Admin

----- Original Message ----- 
From: "Ivan Andres Hernandez Puga" <ivan.hernandez () globalsis com ar>
To: <security-basics () securityfocus com>
Sent: Friday, February 20, 2004 11:54 AM
Subject: How to find a changing IP on ethernet network


> Hello. I have a client with a simple Ethernet network with HUB's
> connecting and there is one person that is changing it's IP and creating
> conflicts. What would you do to track down that person? i mean, to find
> who does that?
> Thanks!
> Ivan Hernandez


---------------------------------------------------------------------------
Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection

Protect your network with the comprehensive security solution that
integrates six applications for ease of use and lower TCO.

Firewall - Virus protection - Spam protection - URL blocking - VPN
- Wireless security.

Download 30-day evaluation at:
http://www.securityfocus.com/sponsor/Astaro_security-basics_040219
----------------------------------------------------------------------------