Re: rogue IP address

From: Benjamin A. Okopnik (ben_at_callahans.org)
Date: 05/02/03

  • Next message: Naman Latif: "ARP Poisoning" 
    Date: Fri, 2 May 2003 14:13:38 -0400
To: security-basics@securityfocus.com

    On Thu, May 01, 2003 at 01:18:34PM -0700, Chris Berry wrote:
    > >From: <dondon@pacbell.net>
    > >Someone on our network assigned an IP address to their own system without
    > >my knowledge. Using LANguard network scanner, the best I can tell is that
    > >it's a Linux box. The port-to-IP mapping table on our Asante switch
    > >doesn't see to work correctly.
    > >
    > >Any suggestions on tracing down that system that is associated with the IP
    > >is appreciated!
    >
    > Assign that IP to another box and wait to see who calls in for tech support
    > because of the conflict.

    A sysadmin I know used a Windows box on her all-Linux network for just
    that purpose; seems that Windows is *a lot* more contentious when
    fighting for a specific IP than Linux is. Mr. "oh, is that what those
    numbers I changed mean?" User showed up at her door within minutes.

    Ben Okopnik
    -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
    Never attribute to malloc that which can be adequately explained by
    stupidity.
     -- Joerg Pommnitz

    ---------------------------------------------------------------------------
    FastTrain has your solution for a great CISSP Boot Camp. The industry's most
    recognized corporate security certification track, provides a comprehensive
    prospectus based upon the core principle concepts of security. This ALL INCLUSIVE curriculum utilizes lectures, case studies and true hands-on utilization
    of pertinent security tools. For a limited time you can enter for a chance
    to win one of the latest technological innovations, the SEGWAY HT.
    Log onto http://www.securityfocus.com/FastTrain-security-basics
    ----------------------------------------------------------------------------

  • Next message: Naman Latif: "ARP Poisoning"

    Relevant Pages

    • SecurityFocus Microsoft Newsletter #51
      ... Subject: SecurityFocus Microsoft Newsletter #51 ... If you're running a Windows network, then this is the intensive 3-day ... Specialist in Microsoft's Security Services Partner Program, ... Platforms: Solaris and Windows NT ...
      (Focus-Microsoft)
    • RE: file sharing on network with vista and xp home computer
      ... Since the contact through microsoft email has been 24 hours+ for each reply, ... security settings for the root folder until I asked them to. ... network was working for that one week, that I had changed "Everyone's" access ... and I had to reinstall my copy of windows. ...
      (microsoft.public.windowsxp.network_web)
    • Re: Biometrics
      ... Can Microsoft remotely work on a Microsoft Windows 98 Second ... Edition computer via India like Microsoft can work on a Windows XP ... Establishing good security practices (patch when we ... within a network for internal safety reasons and potentially to act as ...
      (microsoft.public.security)
    • Re: Windows Server 2003
      ... Microsoft ran a great webinar for the Network Professional Association ... solely on the topic of Windows 2003 Server security. ...
      (Security-Basics)
    • Re: Win2003 RPC failure after Hotfix
      ... I experienced these issues, too, but I did not apply the patches to our ... KB828026 - Windows Media Player URL Script Command Behaviour ... Windows cannot find the machine account, The Local Security Authority ... Better Management for Network Security ...
      (Focus-Microsoft)