I'm not sure if this the right forum for this question, but here it goes. Is it possible to create an alert that looks for a specified IP address and/or MAC address, and sends an alert when it sees this address incuding the node the address was seen on as well as the node's interface? We are trying to track down a rouge system that pops-up at different times on the network.
Jon