This is for the Techies out there

[greeklady.livejournal.com]

People at my office are having fun with Net Send. If the person cleared the message before they saw the computer name it came from ... is there any way to trace the Net Send? I tried looking in the event viewer but was unlucky.

Any ideas? Apparently management doesn't like people talking about how insufficient wiping causes anal itching. Go figure!

Comments

[jethro.livejournal.com]

Turn off the messenger service.

AFAIK there is no way to track the net send

Re:

[oddball42.livejournal.com]

but it is soo much funt to torment the newbies with fake error messages....

[liquidmercurial.livejournal.com]

netstat -a
You could also use a packet sniffer to find out the exact contents of the message, but if you can track it down to an IP, that should get you what you want.

This might also help you do what you want:
http://www.itc.virginia.edu/desktop/docs/messagepopup/

The name of the computer that sends the NetSend message is in the message itself.

You don't need a sniffer if the computer is in the same domain as you just Tracert the computer name and it will resolve to the IP.

All of the above came from: http://www.experts-exchange.com/Security/Q_20801819.html#9772983 (http://www.experts-exchange.com/Security/Q_20801819.html#9772983), but you have to sign up to see the whole thing....