In a DHCP environment, the host associated with an IP address can change unpredictably, which obviously makes it hard to track down who owned an IP at the time of an event of interest. What is an affective method or strategy for recording the current host name and possibly user account with, with a leased IP address at the time an event is recorded?