Easiest ways to find which host name / mac address had an IP address at a specific date and time?

Question

_{Monday, November 19, 2012 1:23 AM}

If we use Securenat web proxy method with ISA 2006 which does not log user data (only IP addresses) in it's reports, is there an automated way to enter an IP address, date and time into something and have it return the host name and mac address that was using that address at that time (for instance pulling out of DHCP logs and/or past DNS host records)?

All replies (1)

_{Monday, November 19, 2012 6:53 AM ✅Answered}

You can get the MAC addresses from the DHCP logs, but not from DNS.

More About DHCP Audit and Event Logging
http://technet.microsoft.com/en-us/library/dd759178.aspx

Query a Windows DHCP server : find MAC from hostname
"netsh dhcp server scope show clients |find hostname"
http://serverfault.com/questions/378839/query-a-windows-dhcp-server-find-mac-from-hostname

.

I believe the best suggestion is to go third party, such as F5's BigIP or MetaIP (MetaIP is no longer available). But last I heard they are for infrastructures with more than 5000 seats.

F5: BigIP
www.f5.com/products/big-ip/

Ace Fekay
MVP, MCT, MCITP/EA, MCTS Windows 2008/R2 & Exchange 2007, Exchange 2010 EA, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services
Technical Blogs & Videos: http://www.delawarecountycomputerconsulting.com/

This post is provided AS-IS with no warranties or guarantees and confers no rights.