Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

stolen laptop recovery

Status
Not open for further replies.

zxmax

Technical User
Nov 24, 2003
179
CA
HI all, i just got my laptop stolen from my car, i sespect the theif will login to my system (i have a web site hosted)

I do have some sensitive info on that laptops,
My question is , is there anyway i could trace all the Mac address that go to my web server ? i also have a wireless nic on that laptops,

Any suggestions how to track this guy donw, using this info ???

Any suggestions or clues please advise,
 
Assuming that whoever is using the laptop has to login to your website in some way (either by logging in, or via a cookie stored on the laptop), you could arrange for a 'traceroute' command to be triggered targeting the connection IP address.

This won't work if they've purged the cache of cookies, or connect to your site via some kind of anonymous proxy (to hide their real IP address).

Here is an example trace.
Code:
$ /usr/sbin/traceroute [URL unfurl="true"]www.bbc.co.uk[/URL]
traceroute to [URL unfurl="true"]www.bbc.net.uk[/URL] (212.58.224.126), 30 hops max, 38 byte packets
 1  wall (192.168.1.1)  0.580 ms  0.405 ms  0.364 ms
 2  lo1.plusnet.pth-ag2.plus.net (195.166.128.6)  12.661 ms  10.484 ms  12.630 ms
 3  gi1-2.vlan3.pth-gw4.plus.net (212.159.1.3)  75.548 ms  11.883 ms  11.945 ms
 4  gi5-0-4.pth-gw2.plus.net (195.166.129.22)  13.001 ms  12.416 ms  11.933 ms
 5  rt-lonap-a.thdo.bbc.co.uk (193.203.5.90)  15.043 ms  16.515 ms  12.943 ms
 6  [URL unfurl="true"]www26.thdo.bbc.co.uk[/URL] (212.58.224.126)  14.021 ms  14.293 ms  13.959 ms
If this trace had been triggered by the BBC website, it would read in opposite order, with the last entry being my machine (or in your case the laptop), and the 2nd to last entry would be that of the connection Internet Service Provider.

This is who you would contact if you managed to find them via this method, along with dates, times, logs, police crime references or whatever.

--
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top