Re: how to find hidden host within LAN

You can track them..or restrict them with expesive technologies.. like
intelligent switches etc.

However.. if you want the easier way.. you can do the following.....

Assuming all node are windows PCs .... goto each pc on your lan.. (assuming
it is wired )

C:\>ipconfig -all | findstr "Physical" > 1.txt

It will list the Mac Address of the PC.

The mac address in windows will look like ..
00-01-00-33-00-01



You can block the host using too much traffic with iptables..

# iptables -A INPUT -m mac --mac-source 00:01:00:33:00:01 -j DROP


notice the : (colon) instead of - (minus symbol ) in mac address
representation










On Nov 25, 2007 8:09 PM, desant1@xxxxxx <desant1@xxxxxx> wrote:

Hi everybody
I'm using RH ES4 with iptables as gateway/firewall for my
LAN.
In the last week i notice in the iptables logs that a host within
my lan is doing a lot of traffic.
The destination/source address of the
packets and the used port suggest that this host is using peerToPeer
application (emule or similar).
The problem is that i'm not able to
identify this host within my LAN:
I can see his IP address (192.168.x.
y) and i can find his mac address througth ARP, but i can't ping it and
there is no host within my lan with this Mac address.
I can't
traceroute it.
Can someone help me to find this hidden host?

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

Relevant Pages

  • Re: how to find hidden host within LAN
    ... securing wireless so some users in the adjacent office were using his ... goto each pc on your lan.. ... It will list the Mac Address of the PC. ... You can block the host using too much traffic with iptables.. ...
    (RedHat)
  • Re: ICS questions and confusion
    ... >>> has to be another subnet altogether. ... WHY does the LAN connection that connects my router to the ... >>host have to be on a different subnet than the 192.168.0.x one? ... >>where is that documented in all the how-to's on ICS, ...
    (microsoft.public.windowsxp.network_web)
  • Re: [fw-wiz] How to find hidden host within LAN
    ... Is the IP address within a valid range on your network or are we talking ... You can completely block that host from Internet access in IPTables by using ... Depending on your LAN setup you may be able to check your mac tables on your ...
    (Firewall-Wizards)
  • Re: [fw-wiz] How to find hidden host within LAN
    ... there is no host within my lan with this Mac address. ... Tho you said it doesn't ping, ...
    (Firewall-Wizards)
  • Re: router causing ssh etc. slowdown?
    ... >> port on their public IP from a host on their own LAN. ... Let's say host A starts a TCP connection from its ... The router sends the SYN packet to ...
    (Fedora)