Report Offensive Message

I'm suprised no one mentioned this.
After you've captured the traffic and identified the IP address that is causeing the problem, look in the DHCP server and bingo, you know what machine is causing the problem. Look in the docs and you know what port that machine is connected into.