[LARTC] Terrible problem, some men in my net changed their MACs! :/

[LARTC] Terrible problem, some men in my net changed their MACs! :/

[Konrad]

Is any way to detect changed MAC adresses?

Someone taught change MACs peoples in my network and I have problems.

E.g. Two computers working on one MAC, and one IP (static ARP and DHCP).
WinXP is screaming some message... that two computers or more have the 
same IP.

How can I find out who's changed MAC?
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Re: [LARTC] Terrible problem, some men in my net changed their MACs!

[Konrad]

Sylvain wrote:
> 2 possible solutions:
> 
> - check the router's ability to map a port to a mac, and detect changes on
> oe port
> - have a script check the dhcp log file to report windows netbios name
> change on the same IP/MAC

Second solution is hard to do... no everyone my users uses DHCP.
It is not a problem sniff IP and correct MAC, and use it.

My network it's a Wireless LAN with only several computers on cable.

First solution need from me some costs. And sometimes there no 
diferrents between users.

--

How can I check operating system and netbios name in different way?
Are more possible differences between computers in network (with the 
same MAC and IP)?

How can I find out, that IP is being doubled?

--
Thanks for all replies :P

Lenthir
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc