Unknown MAC address

Dear ALL,

a couple of days ago, I was trying to catch information about company's LAN
using Microsoft network monitor and there was many broadcast packets
originating by a particular MAC address but it doesn't seem to belong to an
ip address in the lan.

Anyone of you could give me an help to understand which hw in the lan is
responsible of that behaviour?


Regards

Alberto
Brivio

"Alberto" <> wrote in message
news:...
> Dear ALL,
>
> a couple of days ago, I was trying to catch information about company's
> LAN using Microsoft network monitor and there was many broadcast packets
> originating by a particular MAC address but it doesn't seem to belong to
> an ip address in the lan.
>
> Anyone of you could give me an help to understand which hw in the lan is
> responsible of that behaviour?
>
>
> Regards
>
> Alberto
> Brivio
>


What type of switch do you have? If it is a managed switch, you can find the
physical port that specific MAC address is plugged into.


--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCTS Exchange, MCSE, MCSA 2003 & 2000, MCSA Messaging
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.

I have Cisco Catalyst 2960 series


"Ace Fekay [MCT]" <> ha scritto nel messaggio
news:...
> "Alberto" <> wrote in message
> news:...
>> Dear ALL,
>>
>> a couple of days ago, I was trying to catch information about company's
>> LAN using Microsoft network monitor and there was many broadcast packets
>> originating by a particular MAC address but it doesn't seem to belong to
>> an ip address in the lan.
>>
>> Anyone of you could give me an help to understand which hw in the lan is
>> responsible of that behaviour?
>>
>>
>> Regards
>>
>> Alberto
>> Brivio
>>
>
>
> What type of switch do you have? If it is a managed switch, you can find
> the physical port that specific MAC address is plugged into.
>
>
> --
> Ace
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> Please reply back to the newsgroup or forum for collaboration benefit
> among responding engineers, and to help others benefit from your
> resolution.
>
> Ace Fekay, MCT, MCTS Exchange, MCSE, MCSA 2003 & 2000, MCSA Messaging
> Microsoft Certified Trainer
>
> For urgent issues, please contact Microsoft PSS directly. Please check
> http://support.microsoft.com for regional support phone numbers.

"Alberto" <> wrote in message
news:Owyp%...
>I have Cisco Catalyst 2960 series
>

Good to hear. However I am not familiar with the model. Is it a managed
switch? If so, have you logged into it to find the MAC address and what port
it is on?

Ace

I'm sorry but there is one more switch, a netgear switch...and that is
unmanaged so I have no way to find where that MAC address is originating.



"Ace Fekay [MCT]" <> ha scritto nel messaggio
news:...
> "Alberto" <> wrote in message
> news:Owyp%...
>>I have Cisco Catalyst 2960 series
>>
>
> Good to hear. However I am not familiar with the model. Is it a managed
> switch? If so, have you logged into it to find the MAC address and what
> port it is on?
>
> Ace
>
>

"Alberto" <> wrote in message
news:%...
> I'm sorry but there is one more switch, a netgear switch...and that is
> unmanaged so I have no way to find where that MAC address is originating.

I assume that the unmanaged switch is plugged into your managed switch on a
specific port #? If so, and your managed switch shows that the MAC address
in question exists on that specific port#, then I would look at all the
machines plugged into that switch one at a time to find that MAC address.

SAme if you have a wireless AP. If the wireless AP is plugged into say, port
#12 on the managed switch, and your managed switch indicates that the MAC is
on port 12, then it is a wireless client.

I hope that makes sense. What I am trying to stress, is that you will need
to do a little footwork and sleuthing to find it.

Ace