[Samba] IP-to-Username lookups
Cleber P. de Souza
cleberps at gmail.com
Wed Nov 15 13:59:08 GMT 2006
A suggestion may 'set utmp = yes' into your smb.conf.
So, with 'w' command you could see the logged on users and their IPs.
On 11/14/06, Michael Schurter <michael at susens-schurter.com> wrote:
> Hi,
>
> I'm trying to figure out how to find users by IP. I'm parsing a
> firewall log and would like to map internal IPs to users.
>
> I noticed "nmblookup -A <ip>" returns interesting results:
>
> COMPUTER <00> - M <ACTIVE>
> DOMAIN <00> - <GROUP> M <ACTIVE>
> COMPUTER <03> - M <ACTIVE>
> COMPUTER <20> - M <ACTIVE>
> DOMAIN <1e> - <GROUP> M <ACTIVE>
> USERNAME <03> - M <ACTIVE>
>
> where COMPUTER = NetBIOS computer name, DOMAIN = AD Domain Name, and
> USERNAME = currently logged in user (right?).
>
> The only problem is, how do I tell which row is the Username?
>
> Thanks in advance!
>
> Michael Schurter
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/listinfo/samba
>
--
***
Cleber P. de Souza
More information about the samba
mailing list