Re: How to find a changing IP on ethernet network

From: Maxime Ducharme (mducharme_at_cybergeneration.com)
Date: 02/24/04

  • Next message: Rosenhan, David: "RE: Cisco VPN Client - Stateful Firewall" 
    To: "Ivan Andres Hernandez Puga" <ivan.hernandez@globalsis.com.ar>, <security-basics@securityfocus.com>
Date: Tue, 24 Feb 2004 16:28:58 -0500

    Hi,
      also, do not forget that other tools can be used to spoof MAC
    adresses to make things worst.

    One of tools I know of :
    http://www.laurentconstantin.com/en/netw/netwox/

    It can spoof MAC & create virtual hosts in a network
    (hosts that arent really up).

    I'd suggest to keep tracks of every IPs & MACs in your network
    over a period of time, and then try to correlate them.

    If the offending IP has always the same MAC, you can take a look
    on computers . On Windows you can use

    ipconfig /all |find "Physical"

    that will show the current MAC in use.

    Hope this helps out

    Maxime Ducharme Programmeur / Spécialiste en sécurité réseau

    ----- Original Message -----
    From: "Ivan Andres Hernandez Puga" <ivan.hernandez@globalsis.com.ar>
    To: <security-basics@securityfocus.com>
    Sent: Friday, February 20, 2004 9:54 AM
    Subject: How to find a changing IP on ethernet network

    > Hello. I have a client with a simple Ethernet network with HUB's
    > connecting and there is one person that is changing it's IP and creating
    > conflicts. What would you do to track down that person? i mean, to find
    > who does that?
    > Thanks!
    > Ivan Hernandez
    >
    >
    > --------------------------------------------------------------------------
    -
    > Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection
    >
    > Protect your network with the comprehensive security solution that
    > integrates six applications for ease of use and lower TCO.
    >
    > Firewall - Virus protection - Spam protection - URL blocking - VPN
    > - Wireless security.
    >
    > Download 30-day evaluation at:
    > http://www.securityfocus.com/sponsor/Astaro_security-basics_040219
    > -------------------------------------------------------------------------- 

    --
>
>
---------------------------------------------------------------------------
----------------------------------------------------------------------------
  • Next message: Rosenhan, David: "RE: Cisco VPN Client - Stateful Firewall"

    Relevant Pages

    • TidBITS#794/29-Aug-05
      ... This week's issue brings a potpourri of Mac news, ... Mark Anbinder looks briefly at Google Talk, ... Adding Tiger's AirPort Preferred Network List ...
      (comp.sys.mac.digest)
    • Apples new software may steal the show
      ... Steve Jobs, Apple Computer's co-founder and performer in chief, rarely shows any reluctance to sell -- or even over-sell -- his company's accomplishments. ... Jobs spent only about five minutes talking about what I see as the big news of the day: Apple's first software for using a home network through a television screen rather than a computer monitor. ... Apple's Mac OS X, the software running all its Macintosh computers, also has built-in features for easily connecting Macs in a network. ...
      (comp.sys.mac.advocacy)
    • Re: About War Driving ..
      ... However, MAC filtering does not qualify as defense in depth, ... because the attacker can spoof a valid IP address. ... broadcasting the SSID doesn't hide a network, but just makes it show up ... machines in your building that you can control and check the MAC ...
      (Security-Basics)
    • Re: Wired security improvements
      ... I have a lot of experience with 802.1x in a wireless environment and it ... option than MAC Authentication via RADIUS as far as security is concerned, ... it can only provide a weak form of network authentication. ...
      (Security-Basics)
    • Re: OK first real Mac Complaint - Network Trouble
      ... changing the channel on my router has cleared up wireless issues on my ... have to reset it when the connection dies. ... to suck up a large amount of network bandwidth to do unnecessary screen ... It should at least help to identify what the Mac ...
      (comp.sys.mac.misc)
    • Quantcast