External v. Internal IP addresses

cwaldrip
Valued Contributor

Does Casper 8 or 9 log the external IP address of a machine as well as the internal IP address?

We've had cases where a machine has been stolen and our current (non-Casper) reporting software (script the runs hourly and send some info) tries to log the external IP address (using sources like what's my ip, etc). This has helped us track down not only the machines but the thief.

1 ACCEPTED SOLUTION

mking529
Contributor

Casper 8 user here, hoping to move up soon but I highly doubt the behavior has changed..

The JSS logs whatever IP it sees, so if the computer is on the same LAN as the JSS Server, it will log the internal IP address. If the machines checks into the JSS from outside of your network, it will log the external IP address.

View solution in original post

9 REPLIES 9

mking529
Contributor

Casper 8 user here, hoping to move up soon but I highly doubt the behavior has changed..

The JSS logs whatever IP it sees, so if the computer is on the same LAN as the JSS Server, it will log the internal IP address. If the machines checks into the JSS from outside of your network, it will log the external IP address.

cwaldrip
Valued Contributor

Ah! That's actually exactly what we'd want. Using the 'local' IP address could result in lots of 192.168.x.x address, which are useless for tracking.

Not applicable

You could also create an EA using something like ```
dig +short myip.opendns.com @resolver1.opendns.com
``` - might also want to use an EA that reports current wireless network names if you're worried about theft.

cwaldrip
Valued Contributor

Still learning - what's an EA?

mking529
Contributor

EA is Extension Attribute. In the JSS you can have custom commands run and have their results saved in the computer's inventory report. Simple example is keeping track of uptime with the uptime command. Pretty useful stuff.

cwaldrip
Valued Contributor

Ah, sweet. More stuff to learn! :-)

Thanks.

haircut
Contributor

@pete_c

You could also create an EA using something like dig +short myip.opendns.com @resolver1.opendns.com - might also want to use an EA that reports current wireless network names if you're worried about theft.

Might you share your wireless network EA?

bjohnson
New Contributor

In version 9 of the Casper Suite both addresses will be reported in the computer record. So you should see both listed like the following when viewing the general tab for the computer.

IP Address:301.44.62.2
Reported IP Address:100.1.21.249

Jerry_bohall
New Contributor

What's the JSS server for Johnston IA