Solved

How do I find out which machine it is from the mac address?

Posted on 2009-05-13
7
297 Views
Last Modified: 2012-05-06
I have found that somewhere in the network, lives the same IP address as a windows 2003 server.

On the server side, it says there is an IP conflict with the mac address.

Question is how to pinpoint which device is causing the issue?
0
Comment
Question by:binele
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
7 Comments
 
LVL 3

Accepted Solution

by:
goss34 earned 250 total points
ID: 24375496
Hi binele,

If you have the MAC address you can trace it through your network switches providing you have access.

Basically you need to find which port the mac address is coming in on then follow the cable to see which patch port that connects to then go to the corresponding floor ports and you should find the connected PC.

If you need help with the commands etc on the switches post back and il write them out.

Cheers
Dan
0
 
LVL 3

Expert Comment

by:goss34
ID: 24375511
Meant to say if you dont have the MAC address you can check on your DHCP server to see which MAC address has that IP then follow it through the switches.
0
 
LVL 16

Expert Comment

by:Bryan Butler
ID: 24375529
0
Don't Miss ATEN at InfoComm 2017!

Visit booth #2167 to see the  new ATEN VM3200 32 x 32 Modular Matrix Switch. Other highlights include the VE8950 4K HDMI Over IP Extender, VS1912 12-Port DP Video Wall Media Player  and VK2100 ATEN Control System. Register now with Free Pass Code ATEN288!

 
LVL 8

Expert Comment

by:inbox788
ID: 24375592
How big is your network? For a small network, just look at each device. There are several ways, here's one: Start -> Run -> type "cmd" -> type "ipconfig /all"  (type "exit" to quit)

 Bigger networks may require some snooping or sniffing. If you have multiple segments and routers, see if you can't localize where the duplicate is located. Check the router status to see where things are coming from. If you're not finding it on traditional pc's, don't overlook other potential sources like printers, copiers, portable units, etc.



0
 
LVL 10

Assisted Solution

by:ngravatt
ngravatt earned 250 total points
ID: 24375942
on cisco switch do the following if you are looking for IP address 10.20.1.113

sw#show arp | include 10.20.1.113
Internet  10.20.1.113            10   0003.ba21.91f7  ARPA   Vlan20

sw#show mac-address-table address 0003.ba21.91f7
Legend: * - primary entry
        age - seconds since last seen
        n/a - not available

  vlan   mac address     type    learn     age              ports
------+----------------+--------+-----+----------+--------------------------
Supervisor switch 1 Module 5
*   20  0003.ba21.91f7   dynamic  Yes         20   Gi1/9/6
Supervisor switch 2 Module 5
*   20  0003.ba21.91f7   dynamic  Yes         95   Gi1/9/6

this indicates a device with the IP address of 10.20.1.113 is connected to port GI1/9/6


0
 
LVL 3

Expert Comment

by:goss34
ID: 24376206
Cheers ngravatt, saves me typing it out.

binele,

The above will work used it multiple times to track down rogue computers etc.

Cheers
Dan
0
 

Author Closing Comment

by:binele
ID: 31581005
Thanks guys! Helped alot.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
This article is a collection of issues that people face from time to time and possible solutions to those issues. I hope you enjoy reading it.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question