Solved

Ghost IP - How do I kill it?

Posted on 2004-10-01
6
264 Views
Last Modified: 2008-03-06
I am configuring a pc with an Ip address on my lan which is running 2003 Server with Active Directory and every pc has the server set as the Primary DNS server.
When I configure the client machine with the ip in question, it says that the ip address is already in use on the network.
When I try to ping or port scan that address it doesn't respond and there are no ports open.
The only thing that I can think of is that its in an arp cache somewhere or something....

What can I do to clear it or find the offending machine?
0
Comment
Question by:Matrix1000
6 Comments
 
LVL 23

Expert Comment

by:Tim Holman
ID: 12202615
PING the IP address in question, then do an ARP -a to see if the MAC address is listed.
A successful PING response is not mandatory for an ARP cache fill.
Do this on each of your subnets.
If you can find the MAC address, you can probably look through your switch ARP caches to work out precisely where this machine is.
0
 
LVL 4

Expert Comment

by:wileya
ID: 12202674
i mistakenly gave the same IP address to two PCs
a PC that i was setting up in my MIS room and
a PC that was at the other end of the fiber optic

(the boss) got instantly knocked off the network
with an error message that said the IP address
was already in use,

and i couldn't ping that IP because i was pinging
that IP address from the PC that had that same IP
(sort of like calling my phone number from my phone
duh, somebody on it, yea me)

that's one of the problems with static IP addresses
versus dynamic addressing
0
 
LVL 1

Author Comment

by:Matrix1000
ID: 12202918
Thanks for the reply,,,,I'm  pinging from another machine just to be safe...
I did an Arp -a on the server and it comes up with the IP and Mac address....Now that I have the offending mac address ( I think) how can I ping /get the hostname/ find the offending computer?
0
3 Use Cases for Connected Systems

Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, testing some more, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us.

 
LVL 5

Expert Comment

by:netspec01
ID: 12203043
Try ping -A 1.2.3.4
0
 
LVL 4

Expert Comment

by:vnicolae
ID: 12203581
The problem comes with the WINS. Go into it and delete the entry for that IP address. You should be ok after that.


Vlad
0
 
LVL 23

Accepted Solution

by:
Tim Holman earned 500 total points
ID: 12206575
ping -a 1.2.3.4, not -A  ;)

You can also look the MAC address up for it's vendor code on something like this:

http://www.erg.abdn.ac.uk/users/gorry/course/lan-pages/mac-vendor-codes.html

This will narrow your search down to NIC vendor, which may be useful ?
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
For many of us, the  holiday season kindles the natural urge to give back to our friends, family members and communities. While it's easy for friends to notice the impact of such deeds, understanding the contributions of businesses and enterprises i…
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question