'arp -a' to get the IP address.
'nbtstat -A [ip address]' to get logged on users and machine name.
That should get you most of the way...
Cheers,
--
Ben Nagy
Network Security Specialist
Marconi Services Australia Pty Ltd
Mb: +61 414 411 520 PGP Key ID: 0x1A86E304
> -----Original Message-----
> From: AEHeald [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, 21 February 2001 6:34
> To: '[EMAIL PROTECTED]' '
> Subject: Would anyone know
>
>
> Hello all;
>
> I have lurked on this list for a year plus and learned a
> great deal from all
> of you.
> Right now I am trying to track down a machine(s) and only
> have the NIC
> address as a locator. This is an NT/Netbios network. (All
> booing should be
> considered heard and agreed with) and I need to find out the
> machine which
> is attempting to perpetrate an external DDOS from behind my firewall.
>
> Please let me know your thoughts.
>
>
> Arian Heald
> Sr. Systems Engineer
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
