How to track down a machine

Question

I've run the Solarwinds IP Address Manager and the IP Network Browser and there are a handful of static Addresses that show zero information about them and I don't know how to track down what devices are using those IP addresses.  All of our Cisco devices are showing up that way as well, but I just happen to know their IPs.

Any suggestions?
Thanks,
--Taylor

pgpf · Answer

Run the switch port mapper on some of your switches.  It is a fast and easy way to know what IP/MAC addresses are on which switch port.  Or, for Cisco switches you can do the following:

If you know the MAC address, log onto a switch on that subnet.
do a 'show mac-address address xxxx.xxxx.xxxx' and if that address is in the table it will show the port the switch knows that address is on.

Do a 'show mac-address interface xxx' to see how many addresses are on that port.  If you only see the address in question, you've found the port.  If you see many addresses, you know there is a switch, hub, or AP on that port.

Do a 'show cdp neighbor' and you can see if that port has a Cisco device.  Log into that device and continue to track down the mac-address location.

I only know Cisco commands.

Network_Guru · Answer

Do a search in this forum for "scanner"

Here is one topic with a few answers:

www2.solarwinds.net/.../topic.asp

If you have the EE there is a Port Scanner tool which may help.

-=Cheers=-
          NG

Bryan · Answer

Try adding some additional SNMP community strings to your IP network brower.  If you know there's an active IP on the network, but your not sure where it's at, use the switch port mapper to isolate the switch and port.

Lockheed Martin
Atlas V Launch Operations
Network Engineer