Re: [H] Tracking possible rogue DNS?

2021-01-07 Thread lopaka polena
I actually tried setting IP to that range before I posted but arp came back with nothing. I assumed it was local traffic but it looks like it's coming from outside network. Thanks Chris On Thu, Jan 7, 2021 at 10:23 AM Christopher Fisk < christopher.f...@thefisks.org> wrote: > If you're just looki

Re: [H] Tracking possible rogue DNS?

2021-01-07 Thread Christopher Fisk
If you're just looking to get arp info you could always set your IP Address temporarily on that range to see if they are truly local devices (and thus able to retrieve their arp.) You can run wireshark on your PC and see what traffic is going to/from. The 193.27.228.0 network is registered to a Da

[H] Tracking possible rogue DNS?

2021-01-07 Thread lopaka polena
I have multiple devices coming from a 193.27.228.0 range showing up on a 192.168.1.0 network. How can I find the rogue device easily? I can ping the devices but because they are in a different range I don't get any info from arp. lopaka