Go Back   AnandTech Forums > Software > Security

Forums
· Hardware and Technology
· CPUs and Overclocking
· Motherboards
· Video Cards and Graphics
· Memory and Storage
· Power Supplies
· Cases & Cooling
· SFF, Notebooks, Pre-Built/Barebones PCs
· Networking
· Peripherals
· General Hardware
· Highly Technical
· Computer Help
· Home Theater PCs
· Consumer Electronics
· Digital and Video Cameras
· Mobile Devices & Gadgets
· Audio/Video & Home Theater
· Software
· Software for Windows
· All Things Apple
· *nix Software
· Operating Systems
· Programming
· PC Gaming
· Console Gaming
· Distributed Computing
· Security
· Social
· Off Topic
· Politics and News
· Discussion Club
· Love and Relationships
· The Garage
· Health and Fitness
· Home and Garden
· Merchandise and Shopping
· For Sale/Trade
· Hot Deals with Free Stuff/Contests
· Black Friday 2014
· Forum Issues
· Technical Forum Issues
· Personal Forum Issues
· Suggestion Box
· Moderator Resources
· Moderator Discussions
   

Reply
 
Thread Tools
Old 10-30-2012, 11:14 AM   #1
Exterous
Lifer
 
Exterous's Avatar
 
Join Date: Jun 2006
Location: Michigan
Posts: 12,308
Default How to find out who is trying to connect to my radius client

We have a radius client setup and something is trying to constantly connect to it (and failing for improper authentication). Is there any good way to narrow down the location of the device other than walking by everyone's desk and asking them?

Its not our laptops as group policy would handle authentication for those. It was something left here overnight
__________________
"Madness is rare in individuals - but in groups, parties, nations, and ages it is the rule." -Friedrich Nietzshe

"It is well to remember that the entire universe, with one trifiling exception, is composed of others" - John Andrew Holmes
Exterous is offline   Reply With Quote
Old 10-31-2012, 01:01 PM   #2
seepy83
Platinum Member
 
seepy83's Avatar
 
Join Date: Nov 2003
Posts: 2,093
Default

If you know the IP, I would look in DHCP to find out its MAC address. If you have managed switches, you should be able to look through the MAC address table and find out what port it's connected to. Trace the port back to a jack # and go from there.

Last edited by seepy83; 10-31-2012 at 03:01 PM.
seepy83 is offline   Reply With Quote
Old 11-01-2012, 09:04 AM   #3
Exterous
Lifer
 
Exterous's Avatar
 
Join Date: Jun 2006
Location: Michigan
Posts: 12,308
Default

Quote:
Originally Posted by seepy83 View Post
If you know the IP, I would look in DHCP to find out its MAC address. If you have managed switches, you should be able to look through the MAC address table and find out what port it's connected to. Trace the port back to a jack # and go from there.
Eh - sorry it was trying to authenticate to our secured Wifi. Whatever it was stopped. I had resorted to 'door to door' and while I didn't find it maybe the word got out and someone realized they had tried to connect to our secure network instead of the guest on...or something....
__________________
"Madness is rare in individuals - but in groups, parties, nations, and ages it is the rule." -Friedrich Nietzshe

"It is well to remember that the entire universe, with one trifiling exception, is composed of others" - John Andrew Holmes
Exterous is offline   Reply With Quote
Old 11-03-2012, 12:08 PM   #4
SagaLore
Elite Member
 
SagaLore's Avatar
 
Join Date: Dec 2001
Posts: 23,809
Default

Let them connect and run a packet capture on everything they do.
__________________
steppinthraxed
1.) getting banned from a website for being painfully unfunny
2.) creating an epic backfire thread where an entire community bands together to let you know how unfunny you are
person B: after submitting your definition for "federal employee", you probably got steppinthraxed
SagaLore is offline   Reply With Quote
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -5. The time now is 03:34 AM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.