* Nigel Pauli (nigel@st-johns.org.uk) [020305 05:36]:
> I'd be grateful if someone can set my mind at rest on this one.
>
> I've got a network 10.0.0.0/255.255.255.0. A DHCP server running on NT4
> at 10.0.0.3 looks after a scope running from 10.0.0.25 to 10.0.0.225
> with 10.0.0.200 to 10.0.0.225 excluded from the scope.
>
> As you can see I've got plenty of leftover addresses to play with and
> I've used all the ones 10.0.0.1 to 10.0.0.6 on various statically
> addressed servers.
>
> Today I was setting up a new box and thought I'd better check if
> 10.0.0.7 was available so I pinged 10.0.0.7 and got a reply; but as far
> as I know nothing is using that IP address. The same happens for
> 10.0.0.8 and 10.0.0.9 but once I move into double figures (10.0.0.10) I
> get what I expect i.e., no reply.
>
> Is it possible that some card is replying on more than one address or
> do I need to get out there and find who or what is stealing my
> bandwidth?
/usr/sbin/arp might help you see what hardware addresses your kernel has
in its table for those IP addresses, which should tell you who's
responding to your pings. It should at least be easy to see if they're
all coming from the same place, if not recognize the address as one of
your machines or some mystery machine ("like, zoiks, scoob!")
good times,
Vineet
--
Currently seeking opportunities in the SF Bay Area
Please see http://www.doorstop.net/resume/
Attachment:
pgpZf7zIsihUQ.pgp
Description: PGP signature