(no subject)
Apr. 10th, 2003 09:34 pm![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
theducksAs I sometimes do, I have a session on one of the machines at work running looking for very unusual stuff happening (servers disappearing, etc) .. it also notifys of IP address changes.. I noticed someone changing their IP address a few times.
So I run my magic huntMachine script, find out it's in our new building.. I know from the IP address what research group it belongs to and where the ports would be.. I know where their labs with after hours access are.. which narrows it down to one of 4 rooms.. I also know it's an Acer running Windows, and thru some nifty Samba goodness, I know the login name. However it's not a name in our systems, and there's three people with that last name.
And I'm at home.. So how pray tell do I find out who it is?..
Easy!
Send round the boys from security to look for anyone with an Acer laptop, question them, fax me the report and then "escort them from the premises" ;>
Eeeeexcellent
So I run my magic huntMachine script, find out it's in our new building.. I know from the IP address what research group it belongs to and where the ports would be.. I know where their labs with after hours access are.. which narrows it down to one of 4 rooms.. I also know it's an Acer running Windows, and thru some nifty Samba goodness, I know the login name. However it's not a name in our systems, and there's three people with that last name.
And I'm at home.. So how pray tell do I find out who it is?..
Easy!
Send round the boys from security to look for anyone with an Acer laptop, question them, fax me the report and then "escort them from the premises" ;>
Eeeeexcellent
![[identity profile]](https://www.dreamwidth.org/img/silk/identity/openid.png){kind=small}
(no subject)
Date: 2003-04-10 07:57 am (UTC)