Submit a ticketCall us

Systems Monitoring for Dummies
Our new eBook will teach you the fundamentals and help you create monitors and alerts that are effective, meaningful, and actionable. Monitoring is more than a checkbox on your to-do list. This free eBook will give you practical advice to help you succeed in all aspects of monitoring – discovery, alerting, remediation, and troubleshooting. Don’t miss out on this indispensable resource for newbies, experienced IT pros, and everyone in between. Register Now.

Home > Success Center > User Device Tracker (UDT) > UDT Administrator Guide > Common tasks with SolarWinds UDT > Find the switch and port where a particular hostname, IP, or MAC address is/was connected

Find the switch and port where a particular hostname, IP, or MAC address is/was connected

Table of contents
No headers
Created by Steven Bansil_ret, last modified by Steven Bansil_ret on Jan 20, 2017

Views: 159 Votes: 0 Revisions: 2

Scenario: find the switch and port where a particular host name, IP, or MAC address is now connected or was connected in the past in order to respond to a security or network problem.

  1. Click the Device Tracker tab, if not already selected.
  2. Locate UDT Search (just below the menu bar near the top right of the page).
  3. Click the menu in the search box and select the desired option(s) for the search.

    MAC addresses are stored without formatting. You can successfully search for a MAC address with format xxxx.xxxx.xxxx or xx-xx-xx-xx-xx-xx or xx:xx:xx:xx:xx:xx.

  4. Enter the desired term for the search.

    This example uses IP address 10.199.0.3 as the target device.

    In general, specific matches are required sought unless wildcards are used in the search term. This means that if you search for laptop and there is a machine named laptop01, you will not find it unless you search for laptop01 or laptop* (or other valid wildcard search).

  5. Press Enter or click the search to begin the search.

    The search results are displayed in a scrollable, tabular view. For each item, the following information is displayed in columns:

    • Match Item
    • Match Type

    In this example, searching on subnet 10.199.*, we get a list of one item and the software automatically navigates to the Device Tracker Endpoint Details for 10.199.0.3, showing us:

    Node Port

    Node Name

    Connection Duration

    Connection Type

    A1

    Core-4500

    24 days, 8 hours, 5 minutes

    Endpoint IP Address

    (Router)

    Core-4500

    24 days, 8 hours, 5 minutes

    Endpoint IP Address

     

    • Search returns a separate row each for active and inactive connections.
    • If you cannot find a device, but know that it is connected, search using the MAC address to find the port that points to a physical location. MAC addresses are stored without formatting. You can successfully search for a MAC address with format xxxx.xxxx.xxxx or xx-xx-xx-xx-xx-xx or xx:xx:xx:xx:xx:xx.
  6. To monitor this endpoint as a node, click Start monitoring as a node under Endpoint details.
 
Last modified

Tags

Classifications

Public