?
Solved

How do I find out which machine it is from the mac address?

Posted on 2009-05-13
7
Medium Priority
?
300 Views
Last Modified: 2012-05-06
I have found that somewhere in the network, lives the same IP address as a windows 2003 server.

On the server side, it says there is an IP conflict with the mac address.

Question is how to pinpoint which device is causing the issue?
0
Comment
Question by:binele
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
7 Comments
 
LVL 3

Accepted Solution

by:
goss34 earned 1000 total points
ID: 24375496
Hi binele,

If you have the MAC address you can trace it through your network switches providing you have access.

Basically you need to find which port the mac address is coming in on then follow the cable to see which patch port that connects to then go to the corresponding floor ports and you should find the connected PC.

If you need help with the commands etc on the switches post back and il write them out.

Cheers
Dan
0
 
LVL 3

Expert Comment

by:goss34
ID: 24375511
Meant to say if you dont have the MAC address you can check on your DHCP server to see which MAC address has that IP then follow it through the switches.
0
 
LVL 16

Expert Comment

by:Bryan Butler
ID: 24375529
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 8

Expert Comment

by:inbox788
ID: 24375592
How big is your network? For a small network, just look at each device. There are several ways, here's one: Start -> Run -> type "cmd" -> type "ipconfig /all"  (type "exit" to quit)

 Bigger networks may require some snooping or sniffing. If you have multiple segments and routers, see if you can't localize where the duplicate is located. Check the router status to see where things are coming from. If you're not finding it on traditional pc's, don't overlook other potential sources like printers, copiers, portable units, etc.



0
 
LVL 10

Assisted Solution

by:ngravatt
ngravatt earned 1000 total points
ID: 24375942
on cisco switch do the following if you are looking for IP address 10.20.1.113

sw#show arp | include 10.20.1.113
Internet  10.20.1.113            10   0003.ba21.91f7  ARPA   Vlan20

sw#show mac-address-table address 0003.ba21.91f7
Legend: * - primary entry
        age - seconds since last seen
        n/a - not available

  vlan   mac address     type    learn     age              ports
------+----------------+--------+-----+----------+--------------------------
Supervisor switch 1 Module 5
*   20  0003.ba21.91f7   dynamic  Yes         20   Gi1/9/6
Supervisor switch 2 Module 5
*   20  0003.ba21.91f7   dynamic  Yes         95   Gi1/9/6

this indicates a device with the IP address of 10.20.1.113 is connected to port GI1/9/6


0
 
LVL 3

Expert Comment

by:goss34
ID: 24376206
Cheers ngravatt, saves me typing it out.

binele,

The above will work used it multiple times to track down rogue computers etc.

Cheers
Dan
0
 

Author Closing Comment

by:binele
ID: 31581005
Thanks guys! Helped alot.
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will inform Clients about common and important expectations from the freelancers (Experts) who are looking at your Gig.
This article is in regards to the Cisco QSFP-4SFP10G-CU1M cables, which are designed to uplink/downlink 40GB ports to 10GB SFP ports. I recently experienced this and found very little configuration documentation on how these are supposed to be confi…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
NetCrunch network monitor is a highly extensive platform for network monitoring and alert generation. In this video you'll see a live demo of NetCrunch with most notable features explained in a walk-through manner. You'll also get to know the philos…
Suggested Courses

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question