I'm trying to find a computer at work that we can't find the physical location of. There's no documentation in the inventory of it but it responds to nslookup, ping, and i can log onto it and edit its files. However, we have no idea where in the building it is. Anyone have any good ideas for finding it outside of making it beep repetitively and annoying people while i run around looking for it?
|
|
You might be able to use traceroute to figure out which router it's connected to. After finding a router, you can figure out what switches are behind that router. Once you've found the switch, you can use the switch to identify the MAC address associated with the system, and the port. Once you've found the port, use your wiring diagrams (if you have a generally-accurate inventory, I imagine you have these as well) or just trace the cable to the destination. |
|||||||||
|
|
I actually had this problem myself ten years ago. The PC in question was an OS/2 box. It was running server processes, so there was no user session; in fact there was not even a display or mouse hooked up to the thing. There was a (mini)keyboard, but that was simply so the thing would reboot after power failures or what have you. When time came to move, no one could find the damned thing, there was no documentation, and there was no one left from the era who know what it even looked like, let alone where it was. We used echo location (ie. beeping in a loop), and wrote a script that opened and closed the CD tray remotely every 30 seconds. Eventually, it was found in a not-quite-abandoned wiring "closet" underneath a staircase. It was totally caked in dust, and looked like the closet had not been opened in years. It was the opening and closing of the CD door that gave it away; one of the office girls heard this repeated thumping noise (the CD tray was hitting the side wall) and reported it as a possible animal incursion (not unusual; squirrels and raccoons were always trying to get into the building). The maintenance people called us when they found the source of the noise was a misbehaving PC. |
|||||||||||||||||
|
|
Eject the CD tray. |
|||||||||||||
|
|
Use the ping time to triangulate the approximate location. Bring a laptop to each switch in turn and ping, then when you get close turn it into an Annoyatron. |
|||||||||||||||
|
|
Make it beep after hours, so you have less people to annoy. |
|||||
|
|
Check the security log in Event Viewer to see who, if anyone, is logging into the machine. Extract the information from those individuals using standard techniques. |
|||||||
|
|
Just had an idea to add to the pile here. If you can log on to it and edit it's file, possibly you can run a program. If so, try DMIDecode or the systeminfo command -- maybe one of these will give you enough information about the hardware of the machine to help locate it. |
|||||
|
|
Annoying people is your best bet. People will run to you with information where it is. :) As far as I know, there is no IP to physical-location converter available. Quiet method might be just copying bunch of files so you get it's HDD activity light noticeable. However, I would not count on that too much since Murphy says that computer will probably be in closet or something like that. Another method would be selectively unplugging devices in order to find approximate location. But I will assume that losing network connection might annoy people even more than any sound you can make. |
|||||||||||||||
|
|
If you think it has speakers plugged in and turned on, remote in and play some music and crank the volume(of course limited to the hardware speaker volume setting). Even better record a wave file that says "HERE I AM" and play that on a loop. |
|||
|
|
|
If it's an older Windows machine, it may still have the messaging service running. In that case, you can always |
|||
|
Akin to Josip's answer, you could setup a scheduled task to remote shutdown the machine every 15-20 minutes until someone complains that their computer keeps shutting down. |
|||
|
|
|
Install VNC on it and see who is logged on, who has logged on, and put a message on the screen remotely using wordpad to call you. |
|||
|
|
|
Network in my dormitory was 100% switched with dumb switches (cheapiest Repotec 10/100 available), so no info about MAC/IP addresses connected to a port could be obtained. We used to find computer by its IP via continuously pinging that host while disconnecting wires. Once you find out when the ping stops you have found the next switch in the path. Move to it, repeat everything. The dorm was about 14 floors with a switch every floor and one main switch connecting all the floors. It worked perfect for that topology with maximum path of 3 switches between two hosts. |
|||||
|
