Tracking a dhcp address

I have windows 2000 advanced server with cisco switches. I need to track a dhcp address to a switch port.

What is a good cheap software?

Thanks

 

Unless you have a huge number of switches, you have all the software you need. As follows:

- ping -a ipaddress to get the name
- nbtstat -a name to get the MAC address or
- nbtstat -A ipaddress if you prefer.
- Then telnet (or other connection applet if you got one) the switches and query to see if a port has that MAC connected. Sorry but I can't remember the cisco command to do this but your documentation will have it.

There may even be some Cisco app that will allow you to query a bunch of switches at the same time for a specific MAC. Sorry but been out of that part of the networking thing for a while and just don't remember.

 

I have tried those. They don't work because the person is not actually joining the domain. It is not a computer that we have issued. I have a hacker on my network.

 

Which means the user is either on your wire or getting in thru RAS.

Be helpful to know some details. How you determine the IP address for one. How your network is structured for another. Routed, firewalled, etc.

Also if a ping -a ipaddress doesn't give you a computer name, you are almost certainly dealing with a non-M$ operating system.

 

pinging to get a name doesn't help much. It is not a computer that we issued. A name will not help me track it to a cisco port. I am trying to determine what office this ip address is coming from.
I can get mac address, ip address and computer name. I just need to locate the port it is coming from.

I have router and 1 isa firewall. Dhcp is issued from a windows 2000 advanced server.

 

If you have the MAC address, take a look at This page and it will show you the command to run on your router to give you the port information. It also has quite a few other useful router commands you might need at some point.