If you suspect it's in the same IP network as you (that is, your traffic to that machine wouldn't go through the router - it's a local address) - you can do a ping sweep of the entire network and (if it's running IP and is still plugged in, has a transmit pair, and is not otherwise being tricky), you should have it in your ARP table on your local machine for a few minutes. That will probably get you the IP address. If the thing is still potentially broadcasting traffic, you can use tcpdump and specify the mac address as the source host - and probably get the IP that way (again, if there is an IP to be had...) On Thu, 2004-04-22 at 14:19, Brian wrote: > The other day we had a NIC broadcasting some bogus IPX SAP info. I got > the MAC address because our Netware servers were all displaying the MAC > info while complaining. > > Using all the tools at hand, I was unable to track it down. I viewed the > router's ARP table, no luck there. I narrowed it down to one ethernet > segment and strated up ethereal. No luck, this MAC address wasn't showing > up anywhere. > > Is there a good tool to view all the MAC addresses connected to a specific > segment? > > -Brian > > _______________________________________________ > TCLUG Mailing List - Minneapolis/St. Paul, Minnesota > http://www.mn-linux.org tclug-list at mn-linux.org > https://mailman.real-time.com/mailman/listinfo/tclug-list > _______________________________________________ TCLUG Mailing List - Minneapolis/St. Paul, Minnesota http://www.mn-linux.org tclug-list at mn-linux.org https://mailman.real-time.com/mailman/listinfo/tclug-list