Comment on I found a weird IP address on my network that had transmitted an insanely small amount of data. I put the address in my browser and got this. what the heck am I looking at?

thisbenzingring@lemmy.sdf.org ⁨1⁩ ⁨month⁩ ago

• r00ty@kbin.life ⁨1⁩ ⁨month⁩ ago

  Don't need the router. If you're on windows or linux, you just ping the ip then enter 'arp -a <ip>' it will show the MAC address for the IP from your machine's arp cache.

  source
• RestrictedAccount@lemmy.world ⁨1⁩ ⁨month⁩ ago

  It does not show up on the DHCP table, nor does it reflect pings.

  source

  • thisbenzingring@lemmy.sdf.org ⁨1⁩ ⁨month⁩ ago

    You can always start looking at how to use WireShark to sniff the packets and learn more about what is coming and going from that system. WireShark can be a daunting tool but if you look at some videos or walk through you should be able to get a handle on how to make it reveal only the one devices network traffic

    source

    • RestrictedAccount@lemmy.world ⁨1⁩ ⁨month⁩ ago

      I have Wireshark, but haven’t really had a reason to learn it. I mostly just stare at the traffic rolling by the way they do on The Matrix. This is on the list to try.

      source

      • mvirts@lemmy.world ⁨1⁩ ⁨month⁩ ago

        How do you know it sent data? Any chance you have packet captures?

        source

        • -> View More Comments