[ARCHIVED THREAD] - need some help tracking IPs (Page 1 of 2)
Posted: 8/17/2011 8:09:11 AM EDT
| Hey guys, I am a network admin for dod. I am looking for a free program that will tell me what ips are being used on a VLAN. I have a management/legecy vlan that uses all static ip address. right now there is not a record of what ip address are in use. The vlan has maybe a dozen layer three switches and 4 servers on it. The servers are not in use when in garrison and are mainly used for training. There is currently no record keeping of what ip address we are using. i am just trying to figure out a way to keep track of what ip address are in use and avaible. |
|
If you want to keep constant track of who is using what IP, add a chrontab or create a program that runs the following command periodically:
date >> IPDump.txt ###this timestamps the following result arp -a >> IPDump.txt ###should show all IPs on network I think that will work, not 100% sure. This works on my mac, I don't know about whatever you are running or how it will perform on a VLAN. If you just want to see all used IPs at any given time, arp -a should work, and so will IP scanners like nmap or angryIPscanner as long as the host is not hidden somehow (or blocking pings). I think the only surefire way to know who is on the network and with what IP is by asking the router. If your routers run linux, this shouldn't be hard to automate. |
|
Before you go and install a freeware program off the internet to a DoD system, go talk to your IA guy. It's bad juju to install stuff that isnt part of your baseline without prior approval.
One way to find out what ips are currently in use on what vlan is to do a "show vlan" on your cisco device, write down what ports are associated to that vlan. After doing that, do a "show arp" which should show you what ips are associated to whatever switch port |
|
Quoted:
Quoted:
Yep... Up untill a year ago we ran HPUNIX for a while on 2 major servers with only TAC4's.. 120 MHZ risc FTMFW
http://images.memegenerator.net/images/408x/131882.jpg Just to be clear, we are referring to the US Department of Defense? No, he's not kidding. |
|
Quoted:
Quoted:
Quoted:
Quoted:
 This is precisely what I am thinking. Unless he's an "equal" opportunity hire, nobody with a job like that would ask a question like that. So, I wasn't the only one thinking that? And I will add, that you signed paperwork saying you wouldn't talk about "WHAT THE HELL YOU ARE DOING" So why they hell are you on here asking about it and telling what OS you are running. No wonder this country is Fucked and getting hacked. Dam contractor's for DOD...shut your dam trap. Just FYI....Gov gets support for OS's long after the public is no longer supported and yes, I know what I'm talking about and what not to talk about 
|
|
Quoted:
The DoD uses windows server 2003? 
Also, IP scanners will not reliably show you all IPs on the network. The US government is in bed with Microsoft –– apparently they never heard of Linux which comprise the majority of servers in the world. Windows 2003 is pretty modern compared to certain AF bases that up until recently were still using Banyan VINES. |
|
Quoted:
Quoted:
Quoted:
Quoted:
Quoted:
This is precisely what I am thinking. Unless he's an "equal" opportunity hire, nobody with a job like that would ask a question like that. So, I wasn't the only one thinking that? And I will add, that you signed paperwork saying you wouldn't talk about "WHAT THE HELL YOU ARE DOING" So why they hell are you on here asking about it and telling what OS you are running. No wonder this country is Fucked and getting hacked. Dam contractor's for DOD...shut your dam trap. Just FYI....Gov gets support for OS's long after the public is no longer supported and yes, I know what I'm talking about and what not to talk about Another reason I call BS. To work for the DoD in any meaningful capacity, you need to have clearance and you need to sign NDAs. What kind of network admin can't monitor what IP addresses are being used? That's like networking 101. Also, do you have any source for the last statement? I find it hard to believe that microsoft would waste money keeping an OS from '03 secure, or that the DoD would consider it secure... Quoted:
Quoted:
The DoD uses windows server 2003?
Also, IP scanners will not reliably show you all IPs on the network. The US government is in bed with Microsoft –– apparently they never heard of Linux which comprise the majority of servers in the world. Windows 2003 is pretty modern compared to certain AF bases that up until recently were still using Banyan VINES. Yeah, the microsoft-government relationship seems pretty clear, but Server 2003? WTF? I wonder how much the government spends on OSs that have been proven insecure time and time again. |
|
Quoted:
Quoted:
Quoted:
Quoted:
Quoted:
This is precisely what I am thinking. Unless he's an "equal" opportunity hire, nobody with a job like that would ask a question like that. So, I wasn't the only one thinking that? And I will add, that you signed paperwork saying you wouldn't talk about "WHAT THE HELL YOU ARE DOING" So why they hell are you on here asking about it and telling what OS you are running. No wonder this country is Fucked and getting hacked. Dam contractor's for DOD...shut your dam trap. Just FYI....Gov gets support for OS's long after the public is no longer supported and yes, I know what I'm talking about and what not to talk about Who are you, and why do you think you know anything? "what OS you are running" isn't a secret. It's well known. |
|
Quoted:
Yeah, the microsoft-government relationship seems pretty clear, but Server 2003? WTF? I wonder how much the government spends on OSs that have been proven insecure time and time again. Apparently there is open source confirmation for Server 2003 still used by the .mil http://jitc.fhu.disa.mil/recmgt/register.html |
|
Quoted: Quoted: Quoted: Quoted: This is precisely what I am thinking. Unless he's an "equal" opportunity hire, nobody with a job like that would ask a question like that. Oh you might be surprised. This. Dealt with a guy recently that is being phased out. 19 years in an MS environment and he cannot add a fucking AD/DNS server to an existing domain. He also cannot properly setup a DNS zone to save his life at all. Fuck.
|
|
Quoted:
Quoted:
Quoted:
Quoted:
Quoted:
This is precisely what I am thinking. Unless he's an "equal" opportunity hire, nobody with a job like that would ask a question like that. Oh you might be surprised. This. Dealt with a guy recently that is being phased out. 19 years in an MS environment and he cannot add a fucking AD/DNS server to an existing domain. He also cannot properly setup a DNS zone to save his life at all. Fuck. I guess working with only MS products makes you brain-dead. No big surprise there. |
|
Quoted:
Quoted:
Quoted:
Quoted:
Quoted:
This is precisely what I am thinking. Unless he's an "equal" opportunity hire, nobody with a job like that would ask a question like that. Oh you might be surprised. This. Dealt with a guy recently that is being phased out. 19 years in an MS environment and he cannot add a fucking AD/DNS server to an existing domain. He also cannot properly setup a DNS zone to save his life at all. Fuck. Not particularly surprising. We've got some awesome techs in the military. We also have some people who have jobs solely because they're civil service, they've had those jobs for 30 years, and nobody can fire them even though they're completely worthless. Yes, I have specific people in mind. |
|
Quoted:
Quoted:
Quoted:
Quoted:
Quoted:
Quoted:
This is precisely what I am thinking. Unless he's an "equal" opportunity hire, nobody with a job like that would ask a question like that. Oh you might be surprised. This. Dealt with a guy recently that is being phased out. 19 years in an MS environment and he cannot add a fucking AD/DNS server to an existing domain. He also cannot properly setup a DNS zone to save his life at all. Fuck. Not particularly surprising. We've got some awesome techs in the military. We also have some people who have jobs solely because they're civil service, they've had those jobs for 30 years, and nobody can fire them even though they're completely worthless. Yes, I have specific people in mind. I did say "\"equal\" opportunity hire" didn't I? |
|
Quoted:
Quoted:
Quoted:
Quoted:
Quoted:
Quoted:
Quoted:
This is precisely what I am thinking. Unless he's an "equal" opportunity hire, nobody with a job like that would ask a question like that. Oh you might be surprised. This. Dealt with a guy recently that is being phased out. 19 years in an MS environment and he cannot add a fucking AD/DNS server to an existing domain. He also cannot properly setup a DNS zone to save his life at all. Fuck. Not particularly surprising. We've got some awesome techs in the military. We also have some people who have jobs solely because they're civil service, they've had those jobs for 30 years, and nobody can fire them even though they're completely worthless. Yes, I have specific people in mind. I did say "\"equal\" opportunity hire" didn't I? While an issue, that's less of an issue than just longevity in the system. |
|
Quoted:
Quoted:
Quoted:
Quoted:
Quoted:
Quoted:
Quoted:
Quoted:
This is precisely what I am thinking. Unless he's an "equal" opportunity hire, nobody with a job like that would ask a question like that. Oh you might be surprised. This. Dealt with a guy recently that is being phased out. 19 years in an MS environment and he cannot add a fucking AD/DNS server to an existing domain. He also cannot properly setup a DNS zone to save his life at all. Fuck. Not particularly surprising. We've got some awesome techs in the military. We also have some people who have jobs solely because they're civil service, they've had those jobs for 30 years, and nobody can fire them even though they're completely worthless. Yes, I have specific people in mind. I did say "\"equal\" opportunity hire" didn't I? While an issue, that's less of an issue than just longevity in the system. Fuck man, I'd rather have a competent VMS admin - or hell, a system/360 debugger - than a wintard who can't find his own asshole without MSDN. "What do you mean there's no NIPR access from this terminal?" |
|
Quoted: Quoted: Quoted: Quoted: Quoted: Quoted: This is precisely what I am thinking. Unless he's an "equal" opportunity hire, nobody with a job like that would ask a question like that. Oh you might be surprised. This. Dealt with a guy recently that is being phased out. 19 years in an MS environment and he cannot add a fucking AD/DNS server to an existing domain. He also cannot properly setup a DNS zone to save his life at all. Fuck. I guess working with only MS products makes you brain-dead. No big surprise there. That is what you take away from that statement?  You have a lot to learn. |
|
Quoted:
Quoted:
Quoted:
Quoted:
Quoted:
Quoted:
Quoted:
This is precisely what I am thinking. Unless he's an "equal" opportunity hire, nobody with a job like that would ask a question like that. Oh you might be surprised. This. Dealt with a guy recently that is being phased out. 19 years in an MS environment and he cannot add a fucking AD/DNS server to an existing domain. He also cannot properly setup a DNS zone to save his life at all. Fuck. I guess working with only MS products makes you brain-dead. No big surprise there. That is what you take away from that statement?
You have a lot to learn. Are you saying it's not true? I've met way too many Windoze-only "professionals" who couldn't do shit with anything that people actually use anymore (i.e. Linux). |
|
Quoted: Quoted: Quoted: Quoted: Quoted: Quoted: Quoted: Quoted: This is precisely what I am thinking. Unless he's an "equal" opportunity hire, nobody with a job like that would ask a question like that. Oh you might be surprised. This. Dealt with a guy recently that is being phased out. 19 years in an MS environment and he cannot add a fucking AD/DNS server to an existing domain. He also cannot properly setup a DNS zone to save his life at all. Fuck. I guess working with only MS products makes you brain-dead. No big surprise there. That is what you take away from that statement? You have a lot to learn. Are you saying it's not true? I've met way too many Windoze-only "professionals" who couldn't do shit with anything that people actually use anymore (i.e. Linux). No it is not true. |
|
Quoted:
Quoted:
Quoted:
I did say "\"equal\" opportunity hire" didn't I? 
Either your italics are slanted the wrong way, or you don't know the proper syntax for enclosed quotes in written English. And you're not a programmer or DBA. –– say whut? /* My comment (HA!) was correct: that is not the proper syntax for enclosed quotes in /written English/. */ |
|
Quoted:
Quoted:
Quoted:
Quoted:
I did say "\"equal\" opportunity hire" didn't I?
Either your italics are slanted the wrong way, or you don't know the proper syntax for enclosed quotes in written English. And you're not a programmer or DBA. –– say whut? /* My comment (HA!) was correct: that is not the proper syntax for enclosed quotes in /written English/. */ > DELETE FROM replies WHERE userid = 'WhyTanFox'; > commit; |
| guys i serviced a LOT of .gov accounts when i was at IBM. they were routinely years behind the tech when it came to servers. in fact the treasury department had servers that we had special service agreements with becuase they were 10 years beyond end of life but could not be retired due to " custom" applications that no one new how to migrate or replace. |
|
it is extremely poor OPSEC to be discussing the hardware/software architecture of your DoD network in a public forum...
I have seen legacy systems using older HP workstations back when I was an admin 10+ years ago. last time i was working on obtaining an ATO for a site, I was surprised to see that HP-UX was still acceptable by IA standards... |
|
Quoted: Quoted: I did say "\"equal\" opportunity hire" didn't I? Either your italics are slanted the wrong way, or you don't know the proper syntax for enclosed quotes in written English. Looks properly escaped to me. Edit: I see other nerds/geeks beat me to the punch. |
|
Quoted:
Quoted:
Quoted:
I did say "\"equal\" opportunity hire" didn't I?
Either your italics are slanted the wrong way, or you don't know the proper syntax for enclosed quotes in written English. Looks properly escaped to me. Edit: I see other nerds/geeks beat me to the punch. For C++ maybe, but not for SQL. And certainly not for written English, the language in question. Geez, the is the least pedantic group of "programers" I've ever run into... |
|
Quoted:
Quoted:
Quoted:
Quoted:
I did say "\"equal\" opportunity hire" didn't I?
Either your italics are slanted the wrong way, or you don't know the proper syntax for enclosed quotes in written English. Looks properly escaped to me. Edit: I see other nerds/geeks beat me to the punch. For C++ maybe, but not for SQL. And certainly not for written English, the language in question. Geez, the is the least pedantic group of "programers" I've ever run into... You've evidently never used oracle. |
|
Quoted: Quoted: Quoted: Quoted: Quoted: I did say "\"equal\" opportunity hire" didn't I? Either your italics are slanted the wrong way, or you don't know the proper syntax for enclosed quotes in written English. Looks properly escaped to me. Edit: I see other nerds/geeks beat me to the punch. For C++ maybe, but not for SQL. And certainly not for written English, the language in question. Geez, the is the least pedantic group of "programers" I've ever run into... You've evidently never used oracle. |