[jon-wood]

If its in a DC can't they track down the MAC of whatever is responding to their IP, and then trace it to a switch port?