View original (French)

How to retrieve a switch IP from a pc

Solved
froggynou Posted messages 14 Status Member -  
sdj79 Posted messages 304 Status Contributor -
Hello,
I’m currently facing an issue on my IT fleet related to viral problems.
As a network admin for a site with about 1000 workstations, viruses do as they please on the so-called old machines that don’t support antivirus (Windows NT / 256 MB..) I have a particular virus that keeps coming back and I’d like to exorcise it.
I know the beast and I have the solution, the only problem is that it comes from outside (USB key / external HDD / laptop)
I have created a script tied to computer accounts to scan and eradicate this virus at every startup (which works very well).

However, it keeps returning from anywhere on any machine (namely non-resident protected by my antivirus, Bitdefender, which is very effective but requires a minimal config)
This infamous virus sends connection requests via the network admin and local accounts to my servers. This is something I cannot let happen. I’ve noticed via authentication logs that some IPs were nomadic (laptop).

So here is my request:

I would like to be able to retrieve the IP address or MAC of the switch to which the nomad workstation is connected, for which I have the IP, so as to know where this person is located in my establishment with the aim of eradicating the virus at the source.
I’m happy to take scripts and freeware.

Sorry for the novel, but as a network admin I know that the more detailed a problem is, the better we can troubleshoot it.

Thanks to those who take the time to read me.

best regards

4 answers

  1.
    froggynou Posted messages 14 Status Member 2
     
    Yes, the IP of a switch but not just any switch... The one to which the machine is directly connected... My wiring racks are huge and my switches number in the dozens, that's why I'm looking for a way to find the switch that directly links my infected PC :) that way I know the wall outlet (through the switch port) and bingo I know where it is. Rather than searching each switch. But I won't spend forever on it. If I don't find this solution, I would sweep through all my switches one by one to find my IP and know where this nomad is hiding.

    Did you understand my problem well? ;)

    Regards

    ps: I know that a switch is a Layer 2 element in the OSI model, so don't tell me we can't work with the switch's IP because I know that, but it's an implicit task I'm seeking via a MAC or other, and through this I would retrieve the IP.
    0