I'm thinking nmap won't help much here. If you have a managed switch, or a rather simple network (not segmented by routers) a more interesting approach would be to watch for changes in arp <--> IP address pairings.
On the managed switch, check to see the contents of the arp tables periodically - there are lots of apps that will help with this. If you have a *nix box handy, arpwatch is your friend. And, lastly, once you identify a machine that's taking what's supposed to be a static address belonging to another host, visit the box with the incorrect address, and find out what's feeding it that bad IP address - ipconfig /all is your friend, as it lists the DHCP server. I've run into, for instance, a manager who thought that plugging a router (Linksys, I think) into the network so that he could create his own subnet was just a fine idea - until it started handing out bogus IP addresses on that subnet, because he left the DHCP server on it running. We go random machines no longer being able to talk with the production servers (Exchange, file/print, web, etc.) He did it *twice*. On Mon, Jan 12, 2009 at 1:35 PM, Mark A. Ross <[email protected]> wrote: > Ben > > Any idea which function or setting I would use in nmap to witness these > ip collisions? > > Thanks. > > -----Original Message----- > From: Ben Scott [mailto:[email protected]] > Sent: Monday, January 12, 2009 10:36 AM > To: NT System Admin Issues > Subject: Re: Seeking Brainless Util To Resolve (IP Conflicts) > > On Mon, Jan 12, 2009 at 11:47 AM, Mark A. Ross <[email protected]> > wrote: >> ...Seeking a utility that will show the ip's in use, or where they are >> colliding, to determine where the conflict is located. > > nmap > > -- Ben > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
