Windows Forum

Ask something
Discussion Locked

MAC Address

0 helpful
6 replies

by tejota

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Is there a way for me to trace a particular IP address or MAC address? We have a rogue computer on the network and we are trying to locate it.

6 replies

by hstahl

Well, a lot of it has to do w/ your network design and hardware. Some switches and hubs will have an admin mode where you can see what's attached to them, so that can help. Also, if your network consists of a lot of hub or switches coming into a central point you can unplug little "segments" and see if you can still ping the rouge. If you can't, then you know its in that segment.

Also, you can use the MAC address to find the manufacture of the network device. Try this URL:

http://www.bluemax.net/techtips/networking/MAC_Addresses/MAC-BY-MANF.htm

Knowing the manufacture can certainly help.

Good luck and good hunting!
-Heath

by stillatit

Use nbtstat -A to find the Netbios name of a computer.

To find an IP from a MAC address, you can do a scan using any of a number of programs. (Ping each computer in the range of addresses once.) Then run arp -a to show the list ofIP address/MAC address entries in your arp cache.

Good luck.

by tejota

I would also like to add that this computer appears to be either in another domain or workgroup, and the computer name is Deutoronomy. I've used the server manager to change over to it's workgroup and was unable to send a message or do anything. It also shows up as an NT 5.0 Server. I believe that means it's a Win2000 server machine. I am presently looking at the list of manufacturers for MAC addresses since I do have the MAC address for the computer, courtesy of my sniffer. Any more advice is helpful.

This discussion is closed to new replies.