Differences

This shows you the differences between two versions of the page.

--- machinetracker [2007/09/28 12:58] – faltin
+++ machinetracker [2010/09/10 10:01] (current) – faltin
@@ Line 1: / Line 1: @@
 ====== The Machine tracker ======
-{{tools:machinetracker.png|}} NAV has historic data on the whereabouts of all machines (IP adresses / mac adresses) in the network for the last 30 days. You can locate a machine down to the switch port the machine is directly attached to. The machine tracker tool allows you to search for the location of a given machine, or a set of machines. An example is given:
+{{tools:machinetracker.png|}} NAV has historic data on the whereabouts of all machines (IPv4/IPv6 adresses / mac adresses) in the network. You can locate a machine down to the switch port the machine is directly attached to. The machine tracker tool allows you to search for the location of a given machine, or a set of machines. An example is given:
-{{screenshot:machinetracker.png?800|The machine tracker}}
+{{screenshot:3.3:machinetracker.png?600|The machine tracker}}
+:!: The history of your machine tracker data goes all the way back to when your NAV monitoring started. Run the [[commandlinetools#navclean.py|the command line script navclean.py]] to delete old machine tracker data.
 The machine tracker tool has three tabs:
-   - IP search
+   - IP search (both IPv4 and IPv6 supported)
    - Mac search
    - Switch search
 ===== IP search =====
-Enter an IP address or a range of IP addresses and NAV will display the history of the IP address(es)
+Enter an IP address (IPv4 or IPv6) or a range of IP addresses and NAV will display the history of the IP address(es)
-with start and end time and corresponding mac address. Please not that the search results are based on ARP data from routers. Typically ARP data entries are kept by the routers 4 hours after the last packet seen. Also keep in mind, the ARP collector only runs twice an hour (0,30). Subtracting 4-4.5 hours from the end time gives you a fairly good idea.
+with start and end time and corresponding mac address. Please not that the search results are based on ARP data (IPv4) and neighbor cache (IPv6) from routers. Typically ARP data entries are kept by the routers 4 hours after the last packet seen. Also keep in mind, the ARP collector only runs twice an hour (0,30). Subtracting 4-4.5 hours from the end time gives you a fairly good idea.
 For the search you have several options:
@@ Line 25: / Line 28: @@
 To further track down the machine in interest, click on the mac address, this will result in a mac
 to switch port search for the given mac address.
+:!: Note that the IP search is reachable from the prefix report in the report tool. The prefix report has
+a column "Active IPs" for the prefix. Click on the shown number to do a driect IP search.
+:!: Read more about the [[ipv6|IPv6 address mechanisms in NAV]].
 ===== MAC search =====