Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations derfloh on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Forensic Help

Status
Not open for further replies.

iolair

IS-IT--Management
Oct 28, 2002
965
US
I have been requested to discover the source of a document. I was able to find the time and print queue of the document that was printed using salvage, but was not able to recover the user that printed the document. Is it possible, from the recovered print queue file, to see which machine sent the job? A MAC address would be most helpful. The file from the queue contains not only the document text, but lots and lots of printer control characters, and I'm hoping that it will also contain a MAC address or something to tell me where it came from. Thanks. Do you think Novell might be able to decipher it?

Iolair MacWalter
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top