Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Getting MAC Address from IP and Netflow Module

Hey All,

I am trying to track down a rogue DHCP server, I see the IP address in the Netflow monitor but I am unable to find the MAC address in Netflow. Is there a way to get the MAC from Netflow if I found the IP address?

I am bit new so I am still feeling my way around.

Thanks

Find more posts tagged with

Accepted answers

All comments

jacob_beucler

Hey there,

The MAC address is not stored from NetFlow data in NTA. The Data that is stored in NTA is as follows:

Field Type	Field Type Number	Description
IN_BYTES	1	Ingress bytes counter
IN_PKTS	2	Ingress Packets counter
PROTOCOL	4	Layer 4 Protocol
L4_SRC_ PORT	7	Source TCP/UDP Port
IPV4_SRC_ADDR	8	Source IP address
L4_DST_PORT	11	Destination TCP/UDP Port
IPV4_DST_ADDR	12	Desintation IP address
OUTPUT_SNMP	14	SNMP egress interface index

We do have a product that may be of some interest to you, User Device Tracker would provide this information for you. Perhaps check out the trial!

-Jacob