In our network router (cisco 2600) is the DHCP that is setting behind the firewall (3com office Connect). DNS is the windows 2000 server. Firewall reports the warring like users trying to surf a forbidden site, it show the IP and MAC address of violator, but since router is the DHCP it shows the router IP and MAC.
How can I get violator IP or MAC? (Router must be the DHCP in our network since we have several subnets and not all the PC our in the network)
