Yes, I have this problem too. And I came up with two ideas: one money comsuming, one time consuming. Money comsuming: get management switches everywhere, and limit MAC learning per port. My network amounts to 500+ stations, over a preety wide area (all on ethernet), costs evaluated at 30.000$. Rather expensive, ha? Time consuming: get into every windows workstation a program that alows network connection if MAC is unchanged from the one stored localy in an encrypted file. Boss evaluated my ideas, and, guess what? I am now working on the program described above. It will be publicly available, of course... > On Mon, 30 May 2005 20:41:20 +0200 Konrad <kcem@xxxxxxx> wrote: > >>Is any way to detect changed MAC adresses? > I have been working on this for some time. You can try the current > version: > http://shurdeek.routehat.org/tmp/dhcpwatch2.pl > > (please don't ask how it works, I'm pretty busy now :-)). > >>Someone taught change MACs peoples in my network and I have problems. > Yeah I know, I have seen this too. > >>E.g. Two computers working on one MAC, and one IP (static ARP and DHCP). > Exactly. > >>WinXP is screaming some message... that two computers or more have the >>same IP. > Actually this happens when people use the same IP but a *different* MAC. > > Yours sincerely, > Peter > _______________________________________________ > LARTC mailing list > LARTC@xxxxxxxxxxxxxxx > http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc > _______________________________________________ LARTC mailing list LARTC@xxxxxxxxxxxxxxx http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc