Date: Mon, 27 Sep 2004 15:36:13 +1000 From: russell <russm-freebsd-questions@slofith.org> To: bsdfsse <bsdfsse@optonline.net> Cc: "freebsd-questions@FreeBSD.ORG" <freebsd-questions@FreeBSD.ORG> Subject: Re: IP address conflicts Message-ID: <253578F8-1047-11D9-83E5-000A95DA456C@slofith.org> In-Reply-To: <4157A263.7060307@optonline.net> References: <20040927085147.7b2d8575@bofh.spyderweb.com.au> <4157A263.7060307@optonline.net>
next in thread | previous in thread | raw e-mail | index | archive | help
or use a tool like arpwatch that is specifically designed to let you know when MAC/IP relationships change on your network. you log the MAC addresses of all the fixed workstations in the school, then when one of them starts doing the wrong thing you know *exactly* where to go to nab the culprit. If it's not one of the fixed workstations then you've got a bit more work to find the kiddie, but it's nothing insurmountable. On 27/09/2004, at 3:17 PM, bsdfsse wrote: > Hi, > > Could you run a packet sniffer (like Etheral), and log the traffic for > the specific IP's in question? You would see when the MAC address > changed for a given IP. > > Once you knew their MAC address, you could log all their traffic. > Maybe block their traffic. Ban them from your network. > > thx! > > > Tim Aslat wrote: >> Hi All, >> I have an annoying situation in a school I do casual work in their IT >> department. There are a number of individuals within the system who >> think it's funny to allocate an IP address on a workstation identical >> to >> the network's proxy/web/mail servers. What I'd like to know is, would >> there be any way of preventing this short of spending quite a lot of >> money on managed switches an the like? >> I'm unable to restrict access to settings on the machines, as they are >> notebooks owned by the students/staff and could be legitimately >> plugged >> in anywhere in the network. >> Unfortunately solitary confinement on bread & water, or public >> floggings aren't an option. >> Any suggestions? >> Cheers >> Tim > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?253578F8-1047-11D9-83E5-000A95DA456C>