Comments on: How to identify the users in the network http://itknowledgeexchange.techtarget.com/itanswers/how-to-identify-the-users-in-the-network/ Sat, 25 May 2013 00:24:16 +0000 hourly 1 By: robert stewart http://itknowledgeexchange.techtarget.com/itanswers/how-to-identify-the-users-in-the-network/#comment-62272 robert stewart Wed, 15 Apr 2009 14:29:34 +0000 #comment-62272 I agree Ragsdale32, static will be the easy way to do this IMHO. With only 4 workstations, and static ip’s, I think he already has the hard work done.

]]> By: cragsdale32 http://itknowledgeexchange.techtarget.com/itanswers/how-to-identify-the-users-in-the-network/#comment-62219 cragsdale32 Tue, 14 Apr 2009 16:27:41 +0000 #comment-62219 Users (Hosts) can be recongnized by 1. their MAC address, and 2. Their IP. the first is simple to recognize and in an small office environment where IP address are more than likely statically set, Both 1 and 2 will be easy to track with any monitoring tool either custom designed as I understand what you have written, or as one you have found on the market. In an Enterprise environment, IP addresses will typically be DHCP for the majority of Hosts/Users, with Printers, routers and other network equipment being statically set. MAC address monitoring is still viable here, but tracing IP addreses and packets/frames moving around the network by IP address is a bit more involved and more difficult.

Just something to think about.

]]> By: robert stewart http://itknowledgeexchange.techtarget.com/itanswers/how-to-identify-the-users-in-the-network/#comment-62213 robert stewart Tue, 14 Apr 2009 15:20:08 +0000 #comment-62213 Quick question does Wireshark give both destintation ip and originating source ip of the machine making the request?? I believe this to be the case. if so you could first make a list or table of IP’s already assigned to the pc’s or clients. In this case I would probably try to assign the pc’s, clients, workstations, static IP’s. Is it possible for you to assign static ips to the workstations. If so you could print the list of static ip’s for the workstations then compare the ip’s from there to the traffic you are seeing in Wireshark. Of course you will have to know which static ip goes with which machine or user. Another tool which could be helpful determining which user is assigned to an ip would be angry ip, it will give you ip and computer name. I hope this helps you out, you seem to have the hard part done.

]]>