Thank-you Andy - The arp-a spat out the mac address and hunted it down
in
5 minutes. Thanks again RJM

> In article <42Era.5775$jU.4199@prv-forum2.provo.novell.com>, wrote:


> > it had
> > no MAC with it. I can ping the address, so something is using it.


> > Is there anyway I can find out who and where this address is being


used ?
> >

> On a Windows PC (tested on Win2K), first ping the IP, then 'ARP

-a'
> which should give you the MAC of the system.
> From the first 6 characters of the MAC you can tell the manufacturer

of
the
> NIC as per http://standards.ieee.org/regauth/oui/oui.txt which

could
be
> a guide as to what kind of hardware to look for
> and as per Brad, if you have a managed Switch, it could tell you

what
port
> it is on.
>
> you can see if that IP is logged in to any server, if you have few enough
> connections check manually otherwise use MACView from
> http://www.wiredred.com/download_products.html (way down at the

bottom)
> you'll need to convert the IP to hexadecimal, so 192.168.42.26

would be
> C0A82A1A (or 10.1.16.192 would be 0A0110C0) which you will see in

MACViews
> network column if that user is logged in to the NetWare server being


> checked.
>
>
> Andy Konecny
> Ainsworth Inc. in Toronto
> [sometimes being certifiable is more fun than being certified :]
>