Finding a user by IP address

[eweruk]

I need to be able to resolve the user's computer name by the IP address.

Here is the issue, I am tracking uploads and downloads however only the IP address is shown, not the computer's name. So... I need to be able to figure out who each IP belongs to without manually pinging every workstation name to match to the IP address.

I am sure there is a simple command, tool, or something out there.

Thx

[DVNT1]

Internet or LAN?



try ping -a ipaddress

[VHockey86]

this might be a tad bit of overkill for just finding the name, but this will scan every computer in an IP range on a network and give the name/netbios etc.

but, the ping -a IP tells you the name as well so its a much easier solution

[eweruk]

This is within the LAN, but for some reason the -a switch is still only giving me the IP address.

ping -a 192168.1.X gives:

ping -a 192.168.1.X

Pinging 192.168.1.X with 32 bytes of data:

Reply from 192.168.1.X: bytes=32 time<1ms TTL=128
Reply from 192.168.1.X: bytes=32 time<1ms TTL=128
Reply from 192.168.1.X: bytes=32 time<1ms TTL=128
Reply from 192.168.1.X: bytes=32 time<1ms TTL=128

Ping statistics for 192.168.1.X:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms

[DVNT1]

Can you go to your DHCP server and look at the leases?

[eweruk]

Hehe, that is just what I did. Something is messed up though, if I ping some user names, they come up with the wrong IP address.

For example, pinging joeblow gives me 192.168.1.42 but his actual address is 192.168.1.61.

On the DHCP server, the addresses appear correct but some descriptions are wrong. Strange....

[DVNT1]

Sounds like the DCHP server isn't updating DNS entries.

[eweruk]

Thank you DVNT1, that is exactly what it is! I should be able to change the properties of the pointers manually for the ones that are incorrect, or is there a way to update these from the server??

[DVNT1]

see http://support.microsoft.com/default...NoWebContent=1

and possibly http://www.microsoft.com/resources/d...asp?frame=true

[eweruk]

Good info, thanks again.