Re: How to identify unknown devices on network?

2014-07-12 Thread Michael Butash 

Just look up "oui mac search".

You come back with wireshark's mac search database and others, as the 
oui vendor table creates the foundation for most fingerprinting engines 
like nmap too.


-mb


On 07/07/2014 11:39 AM, Stephen Partington wrote:
nmap has a really solid ID system to identifying he mac address and 
using that to ID the hardware it is attached to.



On Mon, Jul 7, 2014 at 11:37 AM, > wrote:


> How can I identify the unknown devices (? below)
> on my local network?

Thanks to all who replied. Much of it was over my head, but I
especially
appreciate Ed Knapp's tip to do a google search for a mac address and
thereby discover what device it that indicates.



---
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org

To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss




--
A mouse trap, placed on top of your alarm clock, will prevent you from 
rolling over and going back to sleep after you hit the snooze button.


Stephen



---
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss


---
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss

Re: How to identify unknown devices on network?

2014-07-07 Thread Ed 
On Mon, Jul 7, 2014 at 5:30 AM,   wrote:
>> MAC address cloning can cause issues also if we are not careful.
>

don't clone MAC addresses-> randomize!   ;)
if the MAC address isn't all that helpful, you might try
fingerprinting the OS running behind the NIC with nmap or p0f


> A duplicated MAC address in a network is as bad (or *WORSE*) that a
> duplicated IP address.
> Once the MAC address is resolved via an ARP 'who has" request, and the
> IP/MAC has been entered in the ARP table, ail communication is predicated on
> knowing the MAC address.
> I can track a duplicated IP address, I don't know if it is possible to track
> a duplicated MAC.
> Br...
> ET
>
>
>
> Ed Knapp writes:
>>
>> The first unknown ( .3 ) looks like a Canon device. Printer?
>> .8 is a Vizio device. TV?
>> .104 is a device from a company called Silex.  Could be any number of
>> devices. They seem to make a wide range of interesting products.
>> http://www.silexamerica.com
>> I just used a MAC address search tool online.
>> The first one that came up for me was http://www.coffer.com .
>> The first part of a Mac hardware address is the manufacturer. The
>> remainder is a unique serial number/identifier.  The two together (are
>> supposed) make a globally unique hardware address to prevent any possible
>> addressing conflicts.
>> Some, er, less conscientious manufacturers aren't diligent about ensuring
>> truly unique mac addresses.  It is easier and cheaper to make half a million
>> exact copies than the added cost and complexity of incrementing the MAC
>> address.
>> MAC address cloning can cause issues also if we are not careful.
>> Hopefully that will help a bit in tracking what has connected to your
>> network.
>> Let us know here on the list if you have any other questions or if we can
>> elaborate.
>> Have a great night!
>> Ed K.
>> Plug lurker
>>>
>>> On Jul 6, 2014, at 11:33 PM, j...@actionline.com wrote:
>>> How can I identify the unknown devices (? below)
>>> on my local network?
>>> Source IP:  Devices:Mac addr:
>>> 192.168.0.1 Motorola00:24:37:85:73:f0 REPLACED
>>> 192.168.0.2 X50031912c:44:fd:67:34:ab Ethernet 3
>>> 192.168.0.3 Unknown ??88:87:17:c0:a4:45 ?
>>> 192.168.0.4 Galaxy phn0c-71-5d-29-dc-ff
>>> 192.168.0.5 Tivo 8460000:11:d9:55:72:ca
>>> 192.168.0.6 Xoom tab98-4b-4a-c0-6f-3a
>>> 192.168.0.7 Chromecastd0:e7:82:c4:5c:ac
>>> 192.168.0.8 ??00:19:9d:56:50:2e ?
>>> 192.168.0.9 Nexus7 tabac:22:0b:44:da:95
>>> 192.168.0.10 HP laptope0:06:e6:a2:93:a5
>>> 192.168.0.91 Lenovo  70:71:bc:3e:00:ed
>>> 192.168.0.64 T43 laptop00:12:f0:34:5c:33
>>> 192.168.0.104 BRW008092CAC78E - 00:80:92:ca:c7:8e ?
>>>
>>> ---
>>> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
>>> To subscribe, unsubscribe, or to change your mail settings:
>>> http://lists.phxlinux.org/mailman/listinfo/plug-discuss
>>
>> ---
>> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
>> To subscribe, unsubscribe, or to change your mail settings:
>> http://lists.phxlinux.org/mailman/listinfo/plug-discuss
>
> ---
> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.phxlinux.org/mailman/listinfo/plug-discuss
---
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss

Re: How to identify unknown devices on network?

2014-07-07 Thread Ed Knapp 
No worries.  I just used the first result for "MAC address vendor search"

In this case, it happened to be http://www.coffer.com/ but there are many out 
there on the intertubes.

Ed K

On Jul 7, 2014, at 11:51 AM, j...@actionline.com wrote:

>>> How can I identify the unknown devices (? below)
>>> on my local network?
>> 
>> Thanks to all who replied. Much of it was over my head, but I especially
>> appreciate Ed Knapp's tip to do a google search for a mac address and
>> thereby discover what device it that indicates.
> 
> oops ... I misspoke (mis-wrote) I guess a google search is not correct.
> What mac address search tool did you use, Ed Knapp, to find the device
> vendors associated with mac addresses?
> 
> 
> 
> 
> ---
> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.phxlinux.org/mailman/listinfo/plug-discuss
---
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss

Re: How to identify unknown devices on network?

2014-07-07 Thread joe 
>> How can I identify the unknown devices (? below)
>> on my local network?
>
> Thanks to all who replied. Much of it was over my head, but I especially
> appreciate Ed Knapp's tip to do a google search for a mac address and
> thereby discover what device it that indicates.

oops ... I misspoke (mis-wrote) I guess a google search is not correct.
What mac address search tool did you use, Ed Knapp, to find the device
vendors associated with mac addresses?




---
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss

Re: How to identify unknown devices on network?

2014-07-07 Thread Stephen Partington 
nmap has a really solid ID system to identifying he mac address and using
that to ID the hardware it is attached to.


On Mon, Jul 7, 2014 at 11:37 AM,  wrote:

> > How can I identify the unknown devices (? below)
> > on my local network?
>
> Thanks to all who replied. Much of it was over my head, but I especially
> appreciate Ed Knapp's tip to do a google search for a mac address and
> thereby discover what device it that indicates.
>
>
>
> ---
> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.phxlinux.org/mailman/listinfo/plug-discuss
>



-- 
A mouse trap, placed on top of your alarm clock, will prevent you from
rolling over and going back to sleep after you hit the snooze button.

Stephen
---
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss

Re: How to identify unknown devices on network?

2014-07-07 Thread joe 
> How can I identify the unknown devices (? below)
> on my local network?

Thanks to all who replied. Much of it was over my head, but I especially
appreciate Ed Knapp's tip to do a google search for a mac address and
thereby discover what device it that indicates.



---
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss

Re: How to identify unknown devices on network?

2014-07-07 Thread Michael Butash 
If using L2 bridging for AP vlan's, it should NOT rewrite the L2 source 
mac - that only occurs at L3 boundaries, or if the ap is doing 
lwapp/capwap tunneling on controller-based networks.  They just act like 
yet another switch in path, fowarding mac addresses as it builds a 
table, not rewriting them.


As per the dupe mac issue, it is MUCH worse to duplicate mac addresses, 
as this causes a condition known as "unicast-broadcast flooding".  I've 
seen data centers crushed because windoze admin's loved using 
microsoft's network load-balancing (nlb) services, that go figure, just 
duplicated mac addresses on all cluster members to make them all receive 
the request (they'd arbitrate on the back-end with an out of band 
connection which should answer).


Why is this bad?

When a switch sees mac addy's learned on multiple ports, it FLOODS the 
frames out ALL interfaces in a given vlan, forwarding as a broadcast 
now, as does all other switches receiving it, and all hosts have to 
accept the packet at least into buffer before dropping it as an unknown 
mac destination (ie. not the host receiving it). Imagine what happens 
when that IP address happens to take a multi-gigabit DDoS attack...  
Data centers go poof, thanks Microsoft (and admins that don't understand 
networking).


Funny enough, Microsoft says the solution is to put your cluster on a 
HUB (yes, not a switch).


Cisco said not to use Microsoft Clustering NLB services, thus the 
load-balancer market was born, now making network guys figure out 
applications (or applications people learning networking).


-mb


On 07/07/2014 05:34 AM, kitepi...@kitepilot.com wrote:
When you have a chain of wireless IP/bridges, and you don't enable the 
WDS feature (implemented
a company called Silex.  Could be any number of devices. They seem to 
make a wide range of interesting products.

http://www.silexamerica.com
I just used a MAC address search tool online.
The first one that came up for me was http://www.coffer.com .
The first part of a Mac hardware address is the manufacturer. The 
remainder is a unique serial number/identifier.  The two together 
(are supposed) make a globally unique hardware address to prevent any 
possible addressing conflicts.
Some, er, less conscientious manufacturers aren't diligent about 
ensuring truly unique mac addresses.  It is easier and cheaper to 
make half a million exact copies than the added cost and complexity 
of incrementing the MAC address.

MAC address cloning can cause issues also if we are not careful.
Hopefully that will help a bit in tracking what has connected to your 
network.
Let us know here on the list if you have any other questions or if we 
can elaborate.

Have a great night!
Ed K.
Plug lurker

On Jul 6, 2014, at 11:33 PM, j...@actionline.com wrote:
How can I identify the unknown devices (? below)
on my local network?
Source IP:  Devices:Mac addr:
192.168.0.1 Motorola00:24:37:85:73:f0 REPLACED
192.168.0.2 X50031912c:44:fd:67:34:ab Ethernet 3
192.168.0.3 Unknown ??88:87:17:c0:a4:45 ?
192.168.0.4 Galaxy phn0c-71-5d-29-dc-ff
192.168.0.5 Tivo 8460000:11:d9:55:72:ca
192.168.0.6 Xoom tab98-4b-4a-c0-6f-3a
192.168.0.7 Chromecastd0:e7:82:c4:5c:ac
192.168.0.8 ??00:19:9d:56:50:2e ?
192.168.0.9 Nexus7 tabac:22:0b:44:da:95
192.168.0.10 HP laptope0:06:e6:a2:93:a5
192.168.0.91 Lenovo  70:71:bc:3e:00:ed
192.168.0.64 T43 laptop00:12:f0:34:5c:33
192.168.0.104 BRW008092CAC78E - 00:80:92:ca:c7:8e ?


---
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss

---
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss

---
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss


---
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss

Re: How to identify unknown devices on network?

2014-07-07 Thread kitepilot 

Man, I gotta wake up!
What I am trying to say is:
Packet transfer happens at the layer 2 (OSI model).
Layer 2 is unaware of IP addresses.
The 802.11 protocol states that the association has to be done at the level 
2 (MAC) which produces several IP addresses with the same MAC address behind 
a a given AP.
That issue is resolved via ebtables and the 'fix' is named WDS (Wireless 
Distribution System)

Clear as mud?
ET 




Ed Knapp writes: 


The first unknown ( .3 ) looks like a Canon device. Printer?
.8 is a Vizio device. TV?
.104 is a device from a company called Silex.  Could be any number of devices. 
They seem to make a wide range of interesting products.
http://www.silexamerica.com 


I just used a MAC address search tool online.
The first one that came up for me was http://www.coffer.com .
The first part of a Mac hardware address is the manufacturer. The remainder is a unique serial number/identifier.  The two together (are supposed) make a globally unique hardware address to prevent any possible addressing conflicts. 


Some, er, less conscientious manufacturers aren't diligent about ensuring truly 
unique mac addresses.  It is easier and cheaper to make half a million exact 
copies than the added cost and complexity of incrementing the MAC address.
MAC address cloning can cause issues also if we are not careful. 


Hopefully that will help a bit in tracking what has connected to your network.
Let us know here on the list if you have any other questions or if we can elaborate. 

Have a great night! 


Ed K.
Plug lurker 

On Jul 6, 2014, at 11:33 PM, j...@actionline.com wrote: 


How can I identify the unknown devices (? below)
on my local network? 


Source IP:  Devices:Mac addr:
192.168.0.1 Motorola00:24:37:85:73:f0 REPLACED
192.168.0.2 X50031912c:44:fd:67:34:ab Ethernet 3
192.168.0.3 Unknown ??88:87:17:c0:a4:45 ?
192.168.0.4 Galaxy phn0c-71-5d-29-dc-ff
192.168.0.5 Tivo 8460000:11:d9:55:72:ca
192.168.0.6 Xoom tab98-4b-4a-c0-6f-3a
192.168.0.7 Chromecastd0:e7:82:c4:5c:ac
192.168.0.8 ??00:19:9d:56:50:2e ?
192.168.0.9 Nexus7 tabac:22:0b:44:da:95
192.168.0.10 HP laptope0:06:e6:a2:93:a5
192.168.0.91 Lenovo  70:71:bc:3e:00:ed
192.168.0.64 T43 laptop00:12:f0:34:5c:33
192.168.0.104 BRW008092CAC78E - 00:80:92:ca:c7:8e ? 

 


---
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss

---
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss

---
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss

Re: How to identify unknown devices on network?

2014-07-07 Thread kitepilot 
When you have a chain of wireless IP/bridges, and you don't enable the WDS 
feature (implemented used ebtables), then all devices behind a given AP 
report the same MAC address (which is part of the 802.11 protocol)

Gets interesting to figure out who is who...   :-)
ET 



Ed Knapp writes: 


The first unknown ( .3 ) looks like a Canon device. Printer?
.8 is a Vizio device. TV?
.104 is a device from a company called Silex.  Could be any number of devices. 
They seem to make a wide range of interesting products.
http://www.silexamerica.com 


I just used a MAC address search tool online.
The first one that came up for me was http://www.coffer.com .
The first part of a Mac hardware address is the manufacturer. The remainder is a unique serial number/identifier.  The two together (are supposed) make a globally unique hardware address to prevent any possible addressing conflicts. 


Some, er, less conscientious manufacturers aren't diligent about ensuring truly 
unique mac addresses.  It is easier and cheaper to make half a million exact 
copies than the added cost and complexity of incrementing the MAC address.
MAC address cloning can cause issues also if we are not careful. 


Hopefully that will help a bit in tracking what has connected to your network.
Let us know here on the list if you have any other questions or if we can elaborate. 

Have a great night! 


Ed K.
Plug lurker 

On Jul 6, 2014, at 11:33 PM, j...@actionline.com wrote: 


How can I identify the unknown devices (? below)
on my local network? 


Source IP:  Devices:Mac addr:
192.168.0.1 Motorola00:24:37:85:73:f0 REPLACED
192.168.0.2 X50031912c:44:fd:67:34:ab Ethernet 3
192.168.0.3 Unknown ??88:87:17:c0:a4:45 ?
192.168.0.4 Galaxy phn0c-71-5d-29-dc-ff
192.168.0.5 Tivo 8460000:11:d9:55:72:ca
192.168.0.6 Xoom tab98-4b-4a-c0-6f-3a
192.168.0.7 Chromecastd0:e7:82:c4:5c:ac
192.168.0.8 ??00:19:9d:56:50:2e ?
192.168.0.9 Nexus7 tabac:22:0b:44:da:95
192.168.0.10 HP laptope0:06:e6:a2:93:a5
192.168.0.91 Lenovo  70:71:bc:3e:00:ed
192.168.0.64 T43 laptop00:12:f0:34:5c:33
192.168.0.104 BRW008092CAC78E - 00:80:92:ca:c7:8e ? 

 


---
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss

---
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss

---
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss

Re: How to identify unknown devices on network?

2014-07-07 Thread kitepilot 

MAC address cloning can cause issues also if we are not careful.
A duplicated MAC address in a network is as bad (or *WORSE*) that a 
duplicated IP address.
Once the MAC address is resolved via an ARP 'who has" request, and the 
IP/MAC has been entered in the ARP table, ail communication is predicated on 
knowing the MAC address.
I can track a duplicated IP address, I don't know if it is possible to track 
a duplicated MAC.

Br...
ET 





Ed Knapp writes: 


The first unknown ( .3 ) looks like a Canon device. Printer?
.8 is a Vizio device. TV?
.104 is a device from a company called Silex.  Could be any number of devices. 
They seem to make a wide range of interesting products.
http://www.silexamerica.com 


I just used a MAC address search tool online.
The first one that came up for me was http://www.coffer.com .
The first part of a Mac hardware address is the manufacturer. The remainder is a unique serial number/identifier.  The two together (are supposed) make a globally unique hardware address to prevent any possible addressing conflicts. 


Some, er, less conscientious manufacturers aren't diligent about ensuring truly 
unique mac addresses.  It is easier and cheaper to make half a million exact 
copies than the added cost and complexity of incrementing the MAC address.
MAC address cloning can cause issues also if we are not careful. 


Hopefully that will help a bit in tracking what has connected to your network.
Let us know here on the list if you have any other questions or if we can elaborate. 

Have a great night! 


Ed K.
Plug lurker 

On Jul 6, 2014, at 11:33 PM, j...@actionline.com wrote: 


How can I identify the unknown devices (? below)
on my local network? 


Source IP:  Devices:Mac addr:
192.168.0.1 Motorola00:24:37:85:73:f0 REPLACED
192.168.0.2 X50031912c:44:fd:67:34:ab Ethernet 3
192.168.0.3 Unknown ??88:87:17:c0:a4:45 ?
192.168.0.4 Galaxy phn0c-71-5d-29-dc-ff
192.168.0.5 Tivo 8460000:11:d9:55:72:ca
192.168.0.6 Xoom tab98-4b-4a-c0-6f-3a
192.168.0.7 Chromecastd0:e7:82:c4:5c:ac
192.168.0.8 ??00:19:9d:56:50:2e ?
192.168.0.9 Nexus7 tabac:22:0b:44:da:95
192.168.0.10 HP laptope0:06:e6:a2:93:a5
192.168.0.91 Lenovo  70:71:bc:3e:00:ed
192.168.0.64 T43 laptop00:12:f0:34:5c:33
192.168.0.104 BRW008092CAC78E - 00:80:92:ca:c7:8e ? 

 


---
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss

---
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss

---
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss

Re: How to identify unknown devices on network?

2014-07-07 Thread Ed Knapp 
The first unknown ( .3 ) looks like a Canon device. Printer?
.8 is a Vizio device. TV?
.104 is a device from a company called Silex.  Could be any number of devices. 
They seem to make a wide range of interesting products.
http://www.silexamerica.com

I just used a MAC address search tool online.
The first one that came up for me was http://www.coffer.com .
The first part of a Mac hardware address is the manufacturer. The remainder is 
a unique serial number/identifier.  The two together (are supposed) make a 
globally unique hardware address to prevent any possible addressing conflicts.

Some, er, less conscientious manufacturers aren't diligent about ensuring truly 
unique mac addresses.  It is easier and cheaper to make half a million exact 
copies than the added cost and complexity of incrementing the MAC address.
MAC address cloning can cause issues also if we are not careful.

Hopefully that will help a bit in tracking what has connected to your network.
Let us know here on the list if you have any other questions or if we can 
elaborate.

Have a great night!

Ed K.
Plug lurker

> On Jul 6, 2014, at 11:33 PM, j...@actionline.com wrote:
> 
> How can I identify the unknown devices (? below)
> on my local network?
> 
> Source IP:  Devices:Mac addr:
> 192.168.0.1 Motorola00:24:37:85:73:f0 REPLACED
> 192.168.0.2 X50031912c:44:fd:67:34:ab Ethernet 3
> 192.168.0.3 Unknown ??88:87:17:c0:a4:45 ?
> 192.168.0.4 Galaxy phn0c-71-5d-29-dc-ff
> 192.168.0.5 Tivo 8460000:11:d9:55:72:ca
> 192.168.0.6 Xoom tab98-4b-4a-c0-6f-3a
> 192.168.0.7 Chromecastd0:e7:82:c4:5c:ac
> 192.168.0.8 ??00:19:9d:56:50:2e ?
> 192.168.0.9 Nexus7 tabac:22:0b:44:da:95
> 192.168.0.10 HP laptope0:06:e6:a2:93:a5
> 192.168.0.91 Lenovo  70:71:bc:3e:00:ed
> 192.168.0.64 T43 laptop00:12:f0:34:5c:33
> 192.168.0.104 BRW008092CAC78E - 00:80:92:ca:c7:8e ?
> 
> 
> 
> ---
> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.phxlinux.org/mailman/listinfo/plug-discuss
---
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss

How to identify unknown devices on network?

2014-07-06 Thread joe 
How can I identify the unknown devices (? below)
on my local network?

Source IP:  Devices:Mac addr:
192.168.0.1 Motorola00:24:37:85:73:f0 REPLACED
192.168.0.2 X50031912c:44:fd:67:34:ab Ethernet 3
192.168.0.3 Unknown ??  88:87:17:c0:a4:45 ?
192.168.0.4 Galaxy phn  0c-71-5d-29-dc-ff
192.168.0.5 Tivo 84600  00:11:d9:55:72:ca
192.168.0.6 Xoom tab98-4b-4a-c0-6f-3a
192.168.0.7 Chromecast  d0:e7:82:c4:5c:ac
192.168.0.8 ??  00:19:9d:56:50:2e ?
192.168.0.9 Nexus7 tab  ac:22:0b:44:da:95
192.168.0.10 HP laptop  e0:06:e6:a2:93:a5
192.168.0.91 Lenovo 70:71:bc:3e:00:ed
192.168.0.64 T43 laptop 00:12:f0:34:5c:33
192.168.0.104 BRW008092CAC78E - 00:80:92:ca:c7:8e ?



---
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss