Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 6 subscribers
  • Views 582 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Using UTM management log data to identify the IP of a known MAC address.

Budgie2

I have received a old network management card which I wish to use in my UPS to enable me to access it remotely.  My problem is I do not know the configured IP address of the second card which had been used in another system and I suspect is configured with a static IP.  Unfortunately there is no way I can reset this card until I know the IP.  I do however have the card here and the MAC address is on the label so.... 

If I connect this to my network will it be possible to search for the MAC address in the network log traffic and identify the IP address and to which UTM port should I connect it? 



This thread was automatically locked due to age.
  • 0

    You would see the MAC address in the Network Protection logs, but I don't believe in Web Protection.  Network Protection > Firewall > from there you can Open Live Log, and see the srcmac and dstmac traffic.  

    You can also see in the DHCP lease table if it does happen to grab a DHCP address on your network.  

    Finally, I believe you could possibly search the log files for the MAC address, depending on which log file you want to search in.  You have the MAC address, so using that for your search parameter should net you some results.

    Someone might know more places, but these are the ones I can think of from top of my head.

    XG 19.5 GA 64-bit | Intel Xeon 4-core v3 1225 3.20Ghz
    16GB Memory | 500GB SSD HDD | GB Ethernet x5

  • 0 in reply to Amodin

    Hi and many thanks.  Found what I needed using wireshark so all good. 

    Regards,

    Budge

  • 0

    We always managed UPSs through a USB port, so I don't know any Ethernet cards for that.  You might be able to see something in the DHCP log.  Let us know...

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Unfiltered HTML