question on mapping net IPs to hosts

[jeffs () speakeasy net]

Assuming one is monitoring an internal net of say 10.0.0.0/24 and getting 
logs and alerts for a bunch of hosts which are dynamically assigned their 
ip number.  How do people in this group go about mapping those dynamically 
assigned IPs to actual machines with the purpose of tracking down malware 
or whatever on those individual host machines, since these IP numbers are 
dynamic and ever changing.

Thanks for any input.

J.


-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users