[96356] in RedHat Linux List

home help back first fref pref prev next nref lref last post

RE: Filtering by Ethernet HW address?

daemon@ATHENA.MIT.EDU (=?iso-8859-1?Q?Markus_D=F6hr?=)
Mon Oct 26 16:03:30 1998

From: =?iso-8859-1?Q?Markus_D=F6hr?= <doehrm@aubi.de>
To: redhat-list@redhat.com
Date: Mon, 26 Oct 1998 21:38:47 +0100
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com

you can use an

	arp -a

to determin the IP of the machine that's doin' worse things.

After having the IP you can simply start a query when you have
a Domain Name Server running.

This all implies that you're running TCP/IP as protocol.


--
Markus D=F6hr                    =20
IT Admin                       =20
AUBI Baubeschl=E4ge GmbH         =20
Tel.: +49 6503 917 152         =20
Fax : +49 6503 917 119         =20
e-Mail: doehrm@aubi.de  =20
*************************      =20


> -----Original Message-----
> From: Kevin M. Myer [mailto:myer@mail.elanco.k12.pa.us]
> Sent: Monday, October 26, 1998 9:20 PM
> To: redhat-list@redhat.com
> Subject: Filtering by Ethernet HW address?
>=20
>=20
> Hi,
>=20
> I recently inherited the job of net cop for our school=20
> district.  There
> are certain people who are obviously violating our "Fair Use Internet
> Policy" and I've managed to obtain several MAC's in this case =
Ethernet
> hardware addresses.  However, I don't know whose machines=20
> these are (aside
> from what I can deduce from the vendor's database of ethernet =
hardware
> addresses - they're Power Mac's with PCI buses, but that=20
> describes about
> 400 of our machines here...).
>=20
> Is there any software for Linux that will allow me to filter based on
> ethernet hardware address so that I can figure out what=20
> traffic is going
> to and from these particular machines?
>=20
> Thanks for any input.
>=20
> Kevin
>=20
> --=20
> Kevin M. Myer
> Technical Services Specialist
> ELANCO School District
>=20
>=20
> --=20
>   PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING=20
> LIST ARCHIVES!
> 		http://www.redhat.com http://archive.redhat.com
>          To unsubscribe: mail redhat-list-request@redhat.com with=20
>                        "unsubscribe" as the Subject.
>=20


-- 
  PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
		http://www.redhat.com http://archive.redhat.com
         To unsubscribe: mail redhat-list-request@redhat.com with 
                       "unsubscribe" as the Subject.


home help back first fref pref prev next nref lref last post