Perhaps they have introduced a broadband router or something simular? Scott
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of The Wirefree Network Sent: Thursday, July 24, 2003 12:50 PM To: [EMAIL PROTECTED] Subject: RE: [smartBridges] OFF TOPIC: Spoofed IP?? T-1 Router/Firewall (all-in-one unit) <--> aPPo (headend) <--> some clients directly off here as well as aPPo repeater (not repeater mode--using 2 radios) <--> more clients out here. Entire network is sB equipment (except router). This problem is not only affecting airBridges either. I was having the problem with the airPoints as well...but I wirelessly used simpleDeploy on them again, and bammo...no problems. Also directly off of the T-1 router/firewall is my internal LAN. All addresses are within the same subnet. I would think it was a firewall problem if it weren't for all my previous info. Sully -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of W.D. McKinney Sent: Thursday, July 24, 2003 11:38 AM To: [EMAIL PROTECTED] Subject: Re: [smartBridges] OFF TOPIC: Spoofed IP?? Post the topology for connectivity between you and customer with hardware devices and IP scheme. Dee On Thu, 2003-07-24 at 11:29, The Wirefree Network wrote: > Here's a weird one. > > Using smartbridges equipment, is there any way I can find out which one > of my users changed their IP address?? > > When I do an arp listing in my router, I noticed that the IP/MAC pairing > was incorrect. So...I called up the client who should have that IP and > their computer was off. When they turned it on and went to IE, my > router prompted me with "IP address 172.16.x.x changed MAC addresses". > And then the arp listing showed the correct MAC for that IP. > > He then turned off his computer and a little while later...I was again > prompted with the "IP address 172.16.x.x changed MAC addresses". I > wrote down the MAC address, but that really does me no good. > > I was hoping that a traceroute would show me which wireless devices he > was hopping out of...but no dice. > > I looked in the associated client listing in the aPPo, but it does not > show that IP whenever I am looking. > > I tried using sniffer software...but I cant pick up any traffic on the > LAN side of my router, being that it is also a switch. I need to find a > way to make my port (permiscious) or act like a hub...so I can sniff > traffic on the whole network. > > I also thought about having the valid client use a different IP for > now...and then block that IP at the LAN interface. Then...just sit back > and wait for that client to call me (with an outage). > > Anyway...my question is....how can I find out who is using this IP?? > > Sully > > The PART-15.ORG smartBridges Discussion List > To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe smartBridges <yournickname> > To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe smartBridges) > Archives: http://archives.part-15.org The PART-15.ORG smartBridges Discussion List To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe smartBridges <yournickname> To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe smartBridges) Archives: http://archives.part-15.org The PART-15.ORG smartBridges Discussion List To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe smartBridges <yournickname> To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe smartBridges) Archives: http://archives.part-15.org The PART-15.ORG smartBridges Discussion List To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe smartBridges <yournickname> To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe smartBridges) Archives: http://archives.part-15.org
