I have a rogue DHCP machine and have used Windows "dhcploc" tool - along with Ethereal - to track down both the ip address and mac-address of this rogue device. After obtaining both of these, I went to my switch (Cisco 2950) and ran "show mac-address...