Re: ip of unknown origin....

Steven Miller wrote:
[snip]
> 0:0:79:58:47:fc is the bogus mac address. any ideas as to how to track
> this down to a particular machine? thanks for any help!

Not sure that will help, but I did the following.

First, I got a hardware vendor name there:
http://www.coffer.com/mac_find/?string=00%3A00%3A79
(Networth Incorporated)

One more search brought me there:
http://www.netspec.com/helpdesk/vndrcode.html
where it's said that Networth Inc was bought by Compaq, and used in
Netelligent series.

Maybe a rogue Compaq on your network? Of course, it could be a bogus MAC
address. In that case, I don't know if there is any other way than
looking for the switch port receiving the frames...

HTH,

Laurent