Solved

Cisco IOS show DHCP host names

Posted on 2007-04-02
13
3,607 Views
Last Modified: 2008-04-03
What is the cisco IOS command to sho all DHCP clients and host-names. I know sh ip dhcp binding shows the MAC addresses but I need to also find the host names which relate to the IPs. Thanks.
0
Comment
Question by:jsm11482
  • 7
  • 6
13 Comments
 
LVL 28

Expert Comment

by:batry_boy
Comment Utility
There is not a command in the Cisco IOS that will show you the hostname of a DHCP client...it simply does not keep this information.

If you want to find out the hostnames associated with the IP addresses or MAC addresses, then I would recommend a utility called Angry IP Scanner...quick, simple, free, and doesn't require an installation!  Check it out here:

http://www.angryziber.com/ipscan
0
 

Author Comment

by:jsm11482
Comment Utility
Thanks. I'll give it a try tomorrow.
0
 
LVL 28

Expert Comment

by:batry_boy
Comment Utility
You give it a range of IP addresses to scan and it can show you the DNS hostname, the NetBIOS name, the MAC address, the name of the user account currently logged in, and can even scan for open ports, plus it's fast...use it quite often myself.
0
 

Author Comment

by:jsm11482
Comment Utility
It's been a while but I did try this. The problem is that the hosts are behind firewalls so how can I figure this out? I have access to the router. Is there any command I can run?
0
 
LVL 28

Expert Comment

by:batry_boy
Comment Utility
You say the hosts are behind a firewall but you have access to the router, so I'm a little confused on the network topology here.  Can you submit a simple network diagram showing the placement of the hosts in relation to the firewall and/or router you mention as well as where you are trying to see the hostnames from, i.e. your PC?  That will provide a clearer picture of how to do what you are wanting to do, if it's possible at all.
0
 

Author Comment

by:jsm11482
Comment Utility
Basically someone is hoggin the network and I know their IP but I can not resolve the IP to a hostname - it appears they are behind a firewall. We basically have the main router which is the DHCP server. All clients/hosts get their IP from the router either via the wired or wireless network. I can either run a command on the router to figure out who the culprit is or I can run some softare on my laptop. I hope that makes sense, thanks!
0
What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 
LVL 28

Expert Comment

by:batry_boy
Comment Utility
Is the IP on the same subnet as where you are checking from?
0
 

Author Comment

by:jsm11482
Comment Utility
Yes. And I have the MAC addreses, which I got by running: sh ip dhcp binding. If that helps.
0
 
LVL 28

Expert Comment

by:batry_boy
Comment Utility
Then if it is a Windows machine, it should respond to Netbios requests.  If it is, you can use the "nbtstat" command from a Windows command prompt and specify the IP address and it should return the hostname and possibly the user ID currently logged into that host.  You have to be on the same subnet as the target IP when using this command because Netbios is broadcast-based traffic.

So, for example, if the target IP is 10.1.1.5, then you could try issuing the following command:

nbtstat -A 10.1.1.5
0
 

Author Comment

by:jsm11482
Comment Utility
Thank you, I did try this and all it returns is Host Not Found. This leads me to believe either NetBios is disabled or blockded (?) or it is one of the Macs here. So, let's pretend I need to know the hostname of the machine and it could me a mac or a pc. Thanks!
0
 
LVL 28

Expert Comment

by:batry_boy
Comment Utility
Do you use managed switches where you could look at the MAC address table to find out which switch port that MAC address is connected to and then physically track down the wall jack that it goes to?  I think I would try that next.
0
 

Author Comment

by:jsm11482
Comment Utility
No we don't have managed switches here - I did think of that though - I have two people in mind who could be the culprit and I could find out their jack number but I can't relate it to the MAC anyway. Also, they are almost certainly using wireless.....good idea though......anthing else? ;-)
0
 
LVL 28

Accepted Solution

by:
batry_boy earned 125 total points
Comment Utility
If you suspect that these hosts are behind firewalls, then I don't think you're going to be able to determine the hostnames remotely.  It sounds like these individuals are possibly operating outside the sanctioned parameters of company policy.  I think I would try to ferret out the individuals by blocking all IP traffic from those IP addresses with an ACL on the router and see if they speak up about the lack of connectivity.

If that sounds too much like being a "network nazi", then you may have to do this the old fashioned way and just ask the individual to show you their MAC address for identification purposes or whatever you want to tell them.

Maybe some other expert out there has some better suggestion, but I think I would take the more "hands on" approach at this point!  ;)
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

Creating an OSPF network that automatically (dynamically) reroutes network traffic over other connections to prevent network downtime.
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now