?
Solved

how to track tcp/ ip change in window xp

Posted on 2009-05-13
5
Medium Priority
?
302 Views
Last Modified: 2012-05-06
sir,

one user use my static ip. we identify them. he change the ip to private ip. we go to event viewer to track the ip change in system event viewer. but he also delete the event viewer item also. Now how can i found when ip change. pls tell us

thanks

0
Comment
Question by:Manojtanwar
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 19

Assisted Solution

by:PeteJThomas
PeteJThomas earned 360 total points
ID: 24373523
Sorry but I know of no way to do this at all.

I don't even think there is an event logged when you change IP addresses in the first place?
0
 
LVL 6

Accepted Solution

by:
MikeGGG earned 1080 total points
ID: 24373571
You can write a small script which should constantly (for example once in a minute or in ahour)  resolve the DNS/Netbios name of his PC to IP, and compare with a previous lookup result. When it changed - its up to you to set up a trigger. For example - an email or so.
0
 
LVL 6

Assisted Solution

by:MikeGGG
MikeGGG earned 1080 total points
ID: 24373612
or, much better, remove him from local admins group. I just cannot imagine that  users will change their IPs or delete event logs and the administrator must tolerate it.
0
 
LVL 19

Assisted Solution

by:PeteJThomas
PeteJThomas earned 360 total points
ID: 24373711
==> or, much better, remove him from local admins group. I just cannot imagine that  users will change their IPs or delete event logs and the administrator must tolerate it. <==

Agreed!!

I may have misunderstood the question, I was assuming you meant you need to know when it was last changed rather than how to audit this change moving forward... O.o

Pete
0
 
LVL 7

Assisted Solution

by:sfarazmand
sfarazmand earned 60 total points
ID: 24374545
And to add, any alteration of company equipment to include computers is normally in violation of security training or documents the user signed.  If the user is consistently in the wrong, those policies can be used to terminate (make unemployed, not...well...you know) them.
0

Featured Post

WordPress Tutorial 3: Plugins, Themes, and Widgets

The three most common changes you will make to your website involve the look (themes), the functionality (plugins), and modular elements (widgets).

In this article we will briefly define each again, and give you directions on how to install them.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article is a collection of issues that people face from time to time and possible solutions to those issues. I hope you enjoy reading it.
WARNING:   If you follow the instructions here, you will wipe out your VTP and VLAN configurations.  Make sure you have backed up your switch!!! I recently had some issues with a few low-end Cisco routers (RV325) and I opened a case with Cisco TA…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
If you're a developer or IT admin, you’re probably tasked with managing multiple websites, servers, applications, and levels of security on a daily basis. While this can be extremely time consuming, it can also be frustrating when systems aren't wor…
Suggested Courses

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question