Tracking IP Addresses to Specific Machines (All)

[ziqbal]

Can you please tell me how can we determine which workstation or server had a given IP address at a given time?

Find a workstation from the server using an ip address search if that is possible.

[Paul S]

Hi

Are the addresses statically or dynamically assigned?

First thought on the matter is no, you will not be able to find this information.

Regards

<font color=green>Paul</font color=green>

<font color=blue>mailto:paul@winguides.com (paul@winguides.com)</font color=blue>

<font color=blue><a target="_blank" href=http://www.paulstoodley.com>http://www.paulstoodley.com</a></font color=blue>

[ziqbal]

The addresses are dynamically assigned. I saw the start of this article on the web and hoped someone would be able to continue where it stops.

http://www.winnetmag.com/WindowsSecurity/Article/ArticleID/41903/41903.html (http://)

Thanks for the reply.

Zubair

[meagain35]

I am not sure I understand your question fully, but here is my simple answer to your question.

One to find the HOSTNAME using an IP address just use the command:
C:\&gt;nbtstat -a 10.100.100.100

In order to find out when the machine's IP lease was obtained I would use psexec from sysinternals to do an ipconfig /all on the machine your checking.


You should see output similar to:
Lease Obtained. . . . . . . . . . : Monday, May 24, 2004 7:45:06 AM


here is a simple script to automate using a hosts.txt file with all the IP addresses you are checking

@echo off

:START
for /f %%i in (hosts.txt) do (
echo Checking %%i....
nbtstat -a %%i | findstr "&lt;00&gt; UNIQUE"
psexec \\%%i ipconfig /all | findstr "Obtained"
echo.
)

echo Done!!
pause &gt;NUL


:END


# example hosts.txt file
c:\&gt;type hosts.txt
10.100.10.25
10.100.10.26
10.100.10.27
10.100.10.28
10.100.10.30