This should allow you to identify the protocol and physical interface through which they are connected, because you'll see both as fields of the frames which the display filter selects. If you are lucky, the actual detection of network neighbourhood takes place only after you open that window.Īfter the ghost devices show up, you would stop the capture and apply a display filter eth.addr = 00:08:15:00:08:15 (of course using the MAC address of the ghost device you are trying to identify). Finding this out is what you can use Wireshark for - on a freshly rebooted Windows machine, start a Wireshark capture on all available network interfaces first, and then go Windows Explorer -> Network. ![]() Using the search bar, you can look for a OUI and find all vendors associated with the information you provided. Or they may use IP but be connected to some other network interface of your PC than the one which looks towards the router. OUI Lookup is a website that provides up-to-date information about MAC Addresses and OUI Vendors. Too much is unknown about your network, so the fact that the home router does cannot see the MACs may be because the devices use some other protocol other than IP, so your PC can detect them using that protocol while your router cannot because it uses only IP and below. ![]() Wireshark passively shows you the contents of packets it can see on the network interfaces, so unless the devices write something like "I am a refrigerator " into the packets they send, Wireshark can only assist your own investigation what those devices are.
0 Comments
Leave a Reply. |