Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

For example someone have installed server with a DHCP on VM connected to a corporate network breaking its operation, so I have IP of that VM, but how to find out IP of its host system ?

share|improve this question

closed as not a real question by Chopper3, theotherreceive, Lucas Kauffman, EEAA, Magellan Nov 5 '12 at 5:21

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

    
one addition: there is no hypervisor or any kind of vm managment system in this case, vm is installed on some unidentifiend user workstation in a network (VirtualBox, VMware Workstation) –  HongKilDong Nov 3 '12 at 9:49
add comment

3 Answers

up vote 5 down vote accepted

You've provided almost no information here making it a terribly-worded question but I'd suggest that you can find the host (you don't even mention a hypervisor!) via inspecting your switch CAM tables. If you can find the physical switch port carrying the VM's traffic then you should be able to find the host's ports too.

share|improve this answer
add comment

I think that it won't be easy. If your switches have management interface, try checking where given MAC address is connected to and you will find owner of this DHCP server. Yes - it takes some time and effort to do this.

share|improve this answer
add comment

Tricky - basically yo ufind the MAC address o the sender, then you identify the owner of the MAC address in your VM management system. Obviously you HAVE one, otherwise you must replace that with some poor guy checking every server manually.

Then you go on and fire the incompetent admin - DHCP guarding is something a modern network shoulddo on multiple levels. In my small company that is done by both, the Hyper-V servers (DHCP guard is a new feature in 2012) as well as the switches that only allow DHCP packets from specific ports.

share|improve this answer
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.