IP address conflicts

[russell]

or use a tool like arpwatch that is specifically designed to let you 
know when MAC/IP relationships change on your network.

you log the MAC addresses of all the fixed workstations in the school, 
then when one of them starts doing the wrong thing you know *exactly* 
where to go to nab the culprit. If it's not one of the fixed 
workstations then you've got a bit more work to find the kiddie, but 
it's nothing insurmountable.


On 27/09/2004, at 3:17 PM, bsdfsse wrote:

> Hi,
>
> Could you run a packet sniffer (like Etheral), and log the traffic for 
> the specific IP's in question?  You would see when the MAC address 
> changed for a given IP.
>
> Once you knew their MAC address, you could log all their traffic.  
> Maybe block their traffic.  Ban them from your network.
>
> thx!
>
>
> Tim Aslat wrote:
>> Hi All,
>> I have an annoying situation in a school I do casual work in their IT
>> department.  There are a number of individuals within the system who
>> think it's funny to allocate an IP address on a workstation identical 
>> to
>> the network's proxy/web/mail servers.  What I'd like to know is, would
>> there be any way of preventing this short of spending quite a lot of
>> money on managed switches an the like?
>> I'm unable to restrict access to settings on the machines, as they are
>> notebooks owned by the students/staff and could be legitimately 
>> plugged
>> in anywhere in the network.
>> Unfortunately solitary confinement on bread & water, or public
>> floggings aren't an option.
>> Any suggestions?
>> Cheers
>> Tim
>
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to 
> "freebsd-questions-unsubscribe at freebsd.org"
>