But, it's not a manged switch, so it wouldn't have an IP, correct? -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of jond Sent: Tuesday, March 25, 2008 5:30 PM To: NT System Admin Issues Subject: Re: Rouge Computer
If the rouge computer has it's firewall up, scanning it isn't going to do much. I would recommend: Use the above techniques to get it's MAC address. >From there: Telnet into your border router at the remote office. (If you dont know the ip, tracert to a machine over there and it's the second to the last ip) Do a 'sh cdp nei det'. It should give the ip of your switch Telnet into that Do a 'sh mac-add'. That should tell you what port on the switch the mac address is on. >From there you can have a poweruser out at your remote site trace the port to the patch panel and assuming there is some logic in how the wiring is done, you should be able to easily physically track them down. ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
