Locate Computer on Network

[JPL910]

Good morning,
I have a computer connected to my network and am unable to locate who/where it is.

Situation: In SQL Enterprise manager under currect activity, I see a computer connecting and can see a MAC address. The problem is that it is not one on my computers. I am trying to locate it on the network.

I have gone into my core switch and did a search for the MAC but it does not find it.
I have tried to tracert and ping but have not been successful. (Nether can find the computer/resolve the name)
I have killed the connection to SQL but it immediately returns.

How can I determine who this is? Is there a way to permanently kill it from SQL or do I have to manually kill it every few minutes? (I am hoping that if they cannot connect they may try to contact me – assuming it is a legitimate user)

Thank you for your assistance.

 

[North323]

can you log in to a switch and find the mac address and find what port it is on? you mentioned core switch, can it be on a closet switch? check your primary router and do a 'sh ip arp | in x.x.x.x the mac should be in there. i would shut the port down.

 

[JPL910]

Thanks for the reply.

I have checked all my switches. It did not find the MAC.

 

[burtsbees]

Does SQL show an IP address? Do you have a LInux machine with Network Tools loaded?

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[North323]

is it directly connected to the sql box? what type of switches are you working with? i've never had an issue where there was no mac. are you using any wireless at your work? do you have an IP address?

 

[DonMc67]

Are you sure there are no users with a hub plugged in anywhere?

 

[jimbopalmer]

1) I use Oracle, and it has no 'local' users, all user use the 'network' interface, even those on the same computer as the database, perhaps your 'MAC' is really a local ID in the Main SQL server.

2) I use the Angry IP scanner to find MAC Addresses and who is using them.

http://www.angryip.org/w/Home

I tried to remain child-like, all I acheived was childish.