Hmmm, that is the fear. I wouldn't change anything in the setup to shut it down just yet. Assuming you have managed switches there I would identify which wall jack it's plugged into and go see.
Mark ------------------------------------------------- Two rules to success in life: 1. Never tell people everything you know. From: James Kerr [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 26, 2008 10:45 AM To: NT System Admin Issues Subject: Re: Rouge Computer At this point I believe that it is a device running Linux, maybe a WAP or a firewall. NMAP seems to confirm this to some point. ----- Original Message ----- From: Mark Boersma <mailto:[EMAIL PROTECTED]> To: NT System Admin Issues <mailto:[email protected]> Sent: Wednesday, March 26, 2008 10:30 AM Subject: RE: Rouge Computer No one has asked why you believe it to be a pc. I would be more concerned that it may be a rogue access point that someone plugged in. Mark ------------------------------------------------- Two rules to success in life: 1. Never tell people everything you know. From: James Kerr [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 26, 2008 9:20 AM To: NT System Admin Issues Subject: Re: Rouge Computer I just did that, lets see who complains. James ----- Original Message ----- From: Jon Harris <mailto:[EMAIL PROTECTED]> To: NT System Admin Issues <mailto:[email protected]> Sent: Wednesday, March 26, 2008 5:07 AM Subject: Re: Rouge Computer Put a reservation in the DHCP server with everything pointing toward 127.0.0.1 and wait for the howling to begin. Jon On Tue, Mar 25, 2008 at 4:31 PM, James Kerr <[EMAIL PROTECTED]> wrote: Tried ping -a but it didn't reveal anything. I didn't see anything in DNS for that IP. The dhcp database did reveal a MAC address at least but I'm not sure what I can do with that though. ----- Original Message ----- From: Michael Ross <mailto:[EMAIL PROTECTED]> To: NT System Admin Issues <mailto:[email protected]> Sent: Tuesday, March 25, 2008 4:25 PM Subject: RE: Rouge Computer Ping -a? Look in the dhcp database? See if it registerd in WINS or DNS? From: John Cook [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 25, 2008 2:56 PM To: NT System Admin Issues Subject: RE: Rouge Computer Angry IP scanner? John W. Cook System Administrator Partnership For Strong Families 315 SE 2nd Ave Gainesville, Fl 32601 Office (352) 393-2741 x320 Cell (352) 215-6944 Fax (352) 393-2746 MCSE, MCTS, MCP+I,CompTIA A+, N+ From: James Kerr [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 25, 2008 3:52 PM To: NT System Admin Issues Subject: Rouge Computer I believe I have a PC at one of our branch offices that is plugged into our LAN that doesnt belong to our company. It has got an IP address from our DHCP server. I was trying to see if I could at least get the computers name so I could try to figure out who it is. We dont have managed switches at that location :( Anyone have any tips? James ________________________________ Please consider the environment before printing this email. ________________________________ CONFIDENTIALITY NOTICE: This e-mail message, including any attachments, is for the sole use of the intended recipients(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. Please consider the environment before printing this email. ________________________________ CONFIDENTIALITY NOTICE: This e-mail message, including any attachments, is for the sole use of the intended recipients(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
