Solved

how to track tcp/ ip change in window xp

Posted on 2009-05-13
5
298 Views
Last Modified: 2012-05-06
sir,

one user use my static ip. we identify them. he change the ip to private ip. we go to event viewer to track the ip change in system event viewer. but he also delete the event viewer item also. Now how can i found when ip change. pls tell us

thanks

0
Comment
Question by:Manojtanwar
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 19

Assisted Solution

by:PeteJThomas
PeteJThomas earned 120 total points
ID: 24373523
Sorry but I know of no way to do this at all.

I don't even think there is an event logged when you change IP addresses in the first place?
0
 
LVL 6

Accepted Solution

by:
MikeGGG earned 360 total points
ID: 24373571
You can write a small script which should constantly (for example once in a minute or in ahour)  resolve the DNS/Netbios name of his PC to IP, and compare with a previous lookup result. When it changed - its up to you to set up a trigger. For example - an email or so.
0
 
LVL 6

Assisted Solution

by:MikeGGG
MikeGGG earned 360 total points
ID: 24373612
or, much better, remove him from local admins group. I just cannot imagine that  users will change their IPs or delete event logs and the administrator must tolerate it.
0
 
LVL 19

Assisted Solution

by:PeteJThomas
PeteJThomas earned 120 total points
ID: 24373711
==> or, much better, remove him from local admins group. I just cannot imagine that  users will change their IPs or delete event logs and the administrator must tolerate it. <==

Agreed!!

I may have misunderstood the question, I was assuming you meant you need to know when it was last changed rather than how to audit this change moving forward... O.o

Pete
0
 
LVL 7

Assisted Solution

by:sfarazmand
sfarazmand earned 20 total points
ID: 24374545
And to add, any alteration of company equipment to include computers is normally in violation of security training or documents the user signed.  If the user is consistently in the wrong, those policies can be used to terminate (make unemployed, not...well...you know) them.
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

#Citrix #Citrix Netscaler #HTTP Compression #Load Balance
Meet the world's only “Transparent Cloud™” from Superb Internet Corporation. Now, you can experience firsthand a cloud platform that consistently outperforms Amazon Web Services (AWS), IBM’s Softlayer, and Microsoft’s Azure when it comes to CPU and …
There's a multitude of different network monitoring solutions out there, and you're probably wondering what makes NetCrunch so special. It's completely agentless, but does let you create an agent, if you desire. It offers powerful scalability …
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question