Windows Forum

Ask something
Discussion Locked

User Identification

0 helpful
5 replies

by ksvijayb

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi,
I have a process or an user NPIF37169 (I am not sure) in my NT for the last couple of days.It takes a DYNAMIC IP address from my DHCP. I am trying to find the user/computer of it. I know the IP address and the Unique Identifier for it. But when I check in my network (about 60 computers) I dont find any computer using that IP address or the NIC address. Is it a process within the NT taking an IP or is it someone entering my system? How do I find it?
Any help to ascertain the cause is most appreciated.

TIA
K.S.Vijayabaskar
Singapore.

5 replies

by mckaytech

Is there any possibility that this is a printer or some other device that is not a computer but still uses DHCP?

My suggestion would be to ping the IP address and then query the arp table to get the MAC address of the device (use 'arp -a' from the command line). From the first part of the MAC address, you can usually determine the manufacturer of the device by looking it up at the IEEE OUI site. That might at least give you some hints as to what you're looking for.

paul

by bergerpeat

Hi, try to telnet this address. Many printer or print servers support telnet. I could help you finding you device.

Good luck.

by shanghai sam

hi,
Thanks.
I used the HP Jetadmin s/w for NT and I found that the process actually was of a N/w Printer.

Vijay.

This discussion is closed to new replies.