i recently had something happen on my network at work and it caused some network issues. i think it was a malfunctioning network device that flooded the network, i unplugged it and things are fine now.
my question is what is everybody's advise on good network monitoring and what ways would you use to find "rogue" networking devices or computers.
for example, i only had an ip address to go by, i had a hard time narrowing down the device. i found the ip address on my DHCP server, but it had limited information, just like it's mac address, but the ip address and mac address doesn't tell me things like what port it is plugged into my switch, so if i knew what port, i could disable the port