On Tue, Mar 25, 2008 at 3:52 PM, James Kerr <[EMAIL PROTECTED]> wrote: > I believe I have a PC at one of our branch offices that is plugged into our > LAN that doesnt belong to our company. It has got an IP address from our > DHCP server.
Like everyone else suggested, looking at the leases and/or logs for the remote DHCP server is a good bet. But to explain this: On Tue, Mar 25, 2008 at 4:03 PM, James Kerr <[EMAIL PROTECTED]> wrote:> Its funny, I cant seem to get a MAC address or a hostname off this thing. It > seems like all I can do is get a reply from a ping. If you can ping it, something is doing ARP for the MAC address, but I'm guessing that would be the remote router. ARP is link layer only; it doesn't cross routers. Bring up the remote router's admin interface, and look at the router's ARP table. -- Ben ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
