How do I find out which machine it is from the mac address?

I have found that somewhere in the network, lives the same IP address as a windows 2003 server.

On the server side, it says there is an IP conflict with the mac address.

Question is how to pinpoint which device is causing the issue?
bineleAsked:
Who is Participating?
 
goss34Connect With a Mentor Commented:
Hi binele,

If you have the MAC address you can trace it through your network switches providing you have access.

Basically you need to find which port the mac address is coming in on then follow the cable to see which patch port that connects to then go to the corresponding floor ports and you should find the connected PC.

If you need help with the commands etc on the switches post back and il write them out.

Cheers
Dan
0
 
goss34Commented:
Meant to say if you dont have the MAC address you can check on your DHCP server to see which MAC address has that IP then follow it through the switches.
0
 
Bryan ButlerCommented:
0
Improve Your Query Performance Tuning

In this FREE six-day email course, you'll learn from Janis Griffin, Database Performance Evangelist. She'll teach 12 steps that you can use to optimize your queries as much as possible and see measurable results in your work. Get started today!

 
inbox788Commented:
How big is your network? For a small network, just look at each device. There are several ways, here's one: Start -> Run -> type "cmd" -> type "ipconfig /all"  (type "exit" to quit)

 Bigger networks may require some snooping or sniffing. If you have multiple segments and routers, see if you can't localize where the duplicate is located. Check the router status to see where things are coming from. If you're not finding it on traditional pc's, don't overlook other potential sources like printers, copiers, portable units, etc.



0
 
ngravattConnect With a Mentor Commented:
on cisco switch do the following if you are looking for IP address 10.20.1.113

sw#show arp | include 10.20.1.113
Internet  10.20.1.113            10   0003.ba21.91f7  ARPA   Vlan20

sw#show mac-address-table address 0003.ba21.91f7
Legend: * - primary entry
        age - seconds since last seen
        n/a - not available

  vlan   mac address     type    learn     age              ports
------+----------------+--------+-----+----------+--------------------------
Supervisor switch 1 Module 5
*   20  0003.ba21.91f7   dynamic  Yes         20   Gi1/9/6
Supervisor switch 2 Module 5
*   20  0003.ba21.91f7   dynamic  Yes         95   Gi1/9/6

this indicates a device with the IP address of 10.20.1.113 is connected to port GI1/9/6


0
 
goss34Commented:
Cheers ngravatt, saves me typing it out.

binele,

The above will work used it multiple times to track down rogue computers etc.

Cheers
Dan
0
 
bineleAuthor Commented:
Thanks guys! Helped alot.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.