Detected 2 unknown Devices on Network.. How to ping them?

[Nocturnal310]

This is the MAC ID of someone on my network: e9:eb:b3:a6:db:3c

pinging on the designated address i.e 192.168.1.71 tells Host unreachable.


now how do i scan for the device based on its MAC ID?

[Shyster1]

Try installing Microsoft's Network Monitor 3.1; as MS states, it's "a a protocol analyzer. It allows you to capture network traffic, view and analyze it."

That might give you some more information about the unknown devices you've found. In terms of the "host unreachable" message, I would guess that you're getting that message because the system in question has turned off the functionality to accept pings (it's a common security technique to make it harder for hackers to probe networks - it also has some minor offensive uses as well, apparently).

[blue68f100]

Look at the routers log, it may tell you more info. At the router you can block the user with a simple rule based on MAC address, then see who hollers.

[merlin_72032]

Easy answer is you can't. If the device is a computer, and it has firewall on, it won't response to your ICMP packet. You can't use Network monitor either because I assume that you router is acting as a switch, and switch doesn't broadcast the packet unless it doesn't have the device on mac address table.

Don't forget that switch separates broadcast domain unlike hub. You just have to block or shut down that port. Whatever fits you situation.

[Shyster1]

Network Monitor will pick up traffic on the LAN between the router and the other device whether or not the router is broadcasting or sending to a specific IP address.

[merlin_72032]

Network Monitor will pick up traffic on the LAN between the router and the other device whether or not the router is broadcasting or sending to a specific IP address.

No it won't. You can't possibly capture the traffic between the router either because router separates and stops broadcast. You will see only ARP request, but there is nothing more.

If you want to capture the packet, you have to mirror the port on the switch or connect the server into a hub.

[WarlordOne]

What are you trying to do? If you want to keep people of your network secure it and enable MAC filtering.

This is the MAC ID of someone on my network: e9:eb:b3:a6:db:3c

pinging on the designated address i.e 192.168.1.71 tells Host unreachable.


now how do i scan for the device based on its MAC ID?