[Samba] IP-to-Username lookups

Cleber P. de Souza cleberps at gmail.com
Wed Nov 15 13:59:08 GMT 2006


A suggestion may 'set utmp = yes' into your smb.conf.
So, with 'w' command you could see the logged on users and their IPs.

On 11/14/06, Michael Schurter <michael at susens-schurter.com> wrote:
> Hi,
>
> I'm trying to figure out how to find users by IP.  I'm parsing a
> firewall log and would like to map internal IPs to users.
>
> I noticed "nmblookup -A <ip>" returns interesting results:
>
>         COMPUTER       <00> -         M <ACTIVE>
>         DOMAIN         <00> - <GROUP> M <ACTIVE>
>         COMPUTER       <03> -         M <ACTIVE>
>         COMPUTER       <20> -         M <ACTIVE>
>         DOMAIN         <1e> - <GROUP> M <ACTIVE>
>         USERNAME       <03> -         M <ACTIVE>
>
> where COMPUTER = NetBIOS computer name, DOMAIN = AD Domain Name, and
> USERNAME = currently logged in user (right?).
>
> The only problem is, how do I tell which row is the Username?
>
> Thanks in advance!
>
> Michael Schurter
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
>


-- 
***
Cleber P. de Souza


More information about the samba mailing list