General discussion

  • Creator
    Topic
  • #2080662

    How can I resolve IPX addresses on my NT

    Locked

    by nippip ·

    I just installed NetXRay on our NT network and see quite a bit of IPX activity. We only have Windows OS’s on the network so I am wondering where this is coming from.
    When I look at the traffic map within XRay and focus it on IPX I see two broadcast points which fan out to most of domain.
    I am not sure how to resolve the IPX numbers. They look like 36C3C7D2:0060B099C26C on what would appear to be the host side of the Traffic Map and only two on the broadcast side. 36C3C7D2:BROADCAST and 00000000:BROADCAST with the 00000000:BROADCAST seeing the bulk of the activity.
    First, how can I resolve these #’s to machines and 2nd how can I eliminate the IPX traffic all together.
    Thanks

All Comments

  • Author
    Replies
    • #3893202

      How can I resolve IPX addresses on my NT

      by rbgnr111 ·

      In reply to How can I resolve IPX addresses on my NT

      netxray should be able to reslove the hardware address of your tcp/ip addresses also. if you are using static ip’s you can compare hardware addresses (ex 36C3C7D2(ipx address):0060B099C26C(hardware address)
      if you list both ipx and tcp/ip with hardware addresses you can match up the hardware address and find the computers that are broadcasting ipx.
      if netxray won’t show the hardware address for tcp/ip try using arp to resolve the hardware address

    • #3895451

      How can I resolve IPX addresses on my NT

      by jmadden ·

      In reply to How can I resolve IPX addresses on my NT

      The 0060B099C26C is the hardware address. The beginning of the address is a vendor ID. The beginning of the above address I think is that of Cisco. (I did not look this up, so I’m not exactly sure.) IPX maybe enabled on your router. Another device to look for that a lot of times have IPX enabled are your external print servers.

      James Madden
      MCNE, MCSE, CCNA

    • #3894328

      How can I resolve IPX addresses on my NT

      by bryan bowers ·

      In reply to How can I resolve IPX addresses on my NT

      To resolve the IPX addresses type the following from a workstation:

      nlist /a /b

      This will display all of the users and their associated IPX addresses.

      The reason you are seeing a lot of broadcast messages is that the servers will send out SAP messages every so often. These SAPs are the equivalent of saying “Here I am, and I have these services available to any user who wants them”.

      To your second question, if you want to eliminate the IPX traffic all together, you need to remove the protocol from your servers. Be careful though, you may still have some devices running that only are using IPX (HP JetDirect cards) to communicatee with your servers.

      Let me know if you have any other questions.

      Bryan

    • #3894103

      How can I resolve IPX addresses on my NT

      by hugevlad ·

      In reply to How can I resolve IPX addresses on my NT

      36C3C7D2 in ipx-address mean ipx-network number and 0060B099C26C mean node number. Usually, node number is equal MAC-address of network card. If you use IP protocol in your network you can locate computer by MAC-address using arp protocol (try arp command).
      To eliminate ipx broadcasts check that “LAN coordinator” setting is set to OFF on WIn95 boxes. With those setting “ON” computers force “elections”, that generate broadcasts.

      With best regards,
      Vladislav.

    • #3894830

      How can I resolve IPX addresses on my NT

      by tysonmathews ·

      In reply to How can I resolve IPX addresses on my NT

      nbtstat -a pc’s_IP
      ex:
      nbtstat -a 10.0.0.1
      you will see the mac address, the user logged in and the workgroup and the domain listed. Pay attention to the mac address which is IPX/SPX adressing. there is your manual resolution.

    • #3894829

      How can I resolve IPX addresses on my NT

      by tysonmathews ·

      In reply to How can I resolve IPX addresses on my NT

      nbtstat -a pc’s_IP
      ex:
      nbtstat -a 10.0.0.1
      you will see the mac address, the user logged in and the workgroup and the domain listed. Pay attention to the mac address which is IPX/SPX adressing. there is your manual resolution.
      OH to eliminate. in the network properties simply remove the IPX/SPX protocal

    • #3893506

      How can I resolve IPX addresses on my NT

      by curlergirl ·

      In reply to How can I resolve IPX addresses on my NT

      Everyone above has answered your question about how to identify the source of the IPX traffic. On eliminating it, before you do so, first check the devices that are using IPX to make sure they also have IP installed and properly set up. After that, you can remove (or disable) IPX from all of the workstations, server(s), router(s), printers, etc. Someone above mentioned HP JetDirect cards – in case you don’t already know, these cards are capable of using IP as well as IPX, so you can disable IPX on them as well if you want to. Hope this helps!

    • #3777730

      How can I resolve IPX addresses on my NT

      by dlafrombois ·

      In reply to How can I resolve IPX addresses on my NT

      I am not absolutely positive but in NXRAY you should be able to ID the Netbios traffic generated by your windows NT environment. This traffic should have the mac address associated with the traffic. Since Netbios traffic uses PC Devices names to communicate, at the user level, and MAC Address to communicate with at the Network level you could “CAPTURE” all traffic and filter for the IPX traffic. Once you stop the trace print out an abreviated list of MACS address. Do the same for the Netbios traffice and compare the MACs to ID the users by the NT/95/98 device names. Once you ID’d these users by their NT names you can then remove the IPX protocol off of these users PCs.

      This seems like a lot of work but without a novell server or IPX server for these users to login, a user name to IPX(MAC) tranlation is not possible.

      Hope this helps….Good luck

    • #3777540

      How can I resolve IPX addresses on my NT

      by dacarr ·

      In reply to How can I resolve IPX addresses on my NT

      For all the time you’r messing about with this it would be easier to get off your backside and check each workstation client config. I had the same trouble once and I spent too long looking for clever solutions

      Good Luck

    • #3754141

      How can I resolve IPX addresses on my NT

      by nippip ·

      In reply to How can I resolve IPX addresses on my NT

      This question was auto closed due to inactivity

Viewing 9 reply threads