Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

What are the ways to detect the Ip-address of the machine that are accessing another machine/server/PC in a LAN?I'm trying to figure out who among of them are accessing the machine that I'm monitoring.Cos there's a lot of traffic happening on that machine, when I accces it takes time to load a the list of directory.

share|improve this question

migrated from Mar 3 '12 at 23:53

This question came from our site for information security professionals.

Need more info, eg accessing what service, how are you monitoring, directory list of what? – deed02392 Feb 29 '12 at 12:11
I'm monitoring file transfer and access. – kedomonzter Mar 1 '12 at 3:01
What kind of file transfer? (There are lots!) Reason for asking, by the way, is that if it's a specific service that's being used, you may be able to get useful information from the management tool for that service. For example, if it's Windows file transfer (SMB) then you can run fsmgmt.msc and it will list who has active connections. – Biglig Mar 1 '12 at 9:46
copying,pasting,downloading and deleting. – kedomonzter Mar 1 '12 at 11:23
My bad, not being clear. I mean what protocol are they using? Is it Windows File Sharing? Web downloading? FTP? SCP? SFTP? Appletalk? NIS? WebDav? rcp? rsync? Bittorrent? – Biglig Mar 1 '12 at 15:51

The tool for this is called netstat, and is available on Windows and most Unixes.

share|improve this answer
By the way, netstat will work regardless of the protocol unless they're using something very weird: I'm asking about the protocol in my comments above because it may mean there's an easier way to get the information you need. – Biglig Mar 1 '12 at 15:56

The best tool for this is wireshark imho...

By using filters (Ip address, MAC address, Protocol...) you will be able to spot where the problem come from...

Hope this help. Let us know.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .