[manu]

Hi,

I have been getting unusual problems in my network ... In a specific range of IP, everyone gets IP CONFLICT ... Not just me, it is random ... Everyone complains that they get conflict ... Anyone has any comments? .

There was a Virus MyTob in our network and it was cleaned ... Will it be a malfunctioning switch ? .. When I check the eventlog for th Mac address of the conflicted PC , i just get 00-00-00-00-00 only ... :angry:

1. No dual DHCP issue
2. No loop

Manu :)

[packet]

manu, on Jul 3 2005, 06:13 AM, said:

Hi,

I have beeing getting unusual problems in my network ... In a specific range of IP, everyone gets IP CONFLICT ... Not just me, it is random ... Everyone complains that they get conflict ... Anyone has any comments? .

There was a Virus MyTob in our network and it was cleaned ... Will it be a malfunctioning switch ? .. When I check the eventlog for th Mac address of the conflicted PC , i just get 00-00-00-00-00 only ...  :angry:

Manu :)

<{POST_SNAPBACK}>

Make sure you don't have any loops in your network, that can cause IP conflits to occur. Also verify that you don't have dualing DHCP servers out there. After those obvious places you can start to look at perhaps someone using DSniff or other fun tools.

--P>G>>>

[manu]

Dsniff?? .. How can it make conflict? :( :ph34r:
... I am reading more about it .. :)

Manu :)

[Blake]

Mnu, create a spanning port on your switches and then start sniffing with your favorite sniffer. Watch for IP addresses being used with different MAC addresses. Then start tracking them from there.

[Partizaan]

I had Mytob.FC on my network to. Its mail / worm (released on the 30-06). I read about it but that has nothing to do with the ip conflict.

I guess a router or so got reset maybe and two dhcp with same pool are giving ip adresses out. Also check WIFI devices.

// At my work when i am out and there is a problem the only solution they know is rebooting and resetting. When i get back i alway got to clean the mess up. (for here the frustration :) ) //

Check arp. Maybe on servers u can do Arp.exe /a in cmd. (windows)
ip - mac. Maybe there are good adress res. prot. tools out there wich work ethernet based.

[fak3]

when i used to get ip conflicts in my home pc i set static mac for the gateway.this didn`t stop the nayghty message but my net connection was stand still.

[manu]

Solved. .

was a crap who brought an WL AP and connected to our N/w ... :angry: .. He was playing hide and seek, connect for sometime and then disconnect ... Finally squeeezed the toy..

Manu :angry: