The Notebook Review forums were hosted by TechTarget, who shut down them down on January 31, 2022. This static read-only archive was pulled by NBR forum users between January 20 and January 31, 2022, in an effort to make sure that the valuable technical information that had been posted on the forums is preserved. For current discussions, many NBR forum users moved over to NotebookTalk.net after the shutdown.
Problems? See this thread at archive.org.

    Detected 2 unknown Devices on Network.. How to ping them?

    Discussion in 'Networking and Wireless' started by Nocturnal310, Oct 14, 2008.

  1. Nocturnal310

    Nocturnal310 Notebook Virtuoso

    Reputations:
    792
    Messages:
    2,708
    Likes Received:
    0
    Trophy Points:
    0
    This is the MAC ID of someone on my network: e9:eb:b3:a6:db:3c

    pinging on the designated address i.e 192.168.1.71 tells Host unreachable.


    now how do i scan for the device based on its MAC ID?
     
  2. Shyster1

    Shyster1 Notebook Nobel Laureate

    Reputations:
    6,926
    Messages:
    8,178
    Likes Received:
    0
    Trophy Points:
    205
    Try installing Microsoft's Network Monitor 3.1; as MS states, it's "a a protocol analyzer. It allows you to capture network traffic, view and analyze it."

    That might give you some more information about the unknown devices you've found. In terms of the "host unreachable" message, I would guess that you're getting that message because the system in question has turned off the functionality to accept pings (it's a common security technique to make it harder for hackers to probe networks - it also has some minor offensive uses as well, apparently :D).
     
  3. blue68f100

    blue68f100 Notebook Virtuoso

    Reputations:
    1,020
    Messages:
    3,439
    Likes Received:
    0
    Trophy Points:
    105
    Look at the routers log, it may tell you more info. At the router you can block the user with a simple rule based on MAC address, then see who hollers.
     
  4. merlin_72032

    merlin_72032 Notebook Evangelist

    Reputations:
    117
    Messages:
    523
    Likes Received:
    0
    Trophy Points:
    30
    Easy answer is you can't. If the device is a computer, and it has firewall on, it won't response to your ICMP packet. You can't use Network monitor either because I assume that you router is acting as a switch, and switch doesn't broadcast the packet unless it doesn't have the device on mac address table.

    Don't forget that switch separates broadcast domain unlike hub. You just have to block or shut down that port. Whatever fits you situation.
     
  5. Shyster1

    Shyster1 Notebook Nobel Laureate

    Reputations:
    6,926
    Messages:
    8,178
    Likes Received:
    0
    Trophy Points:
    205
    Network Monitor will pick up traffic on the LAN between the router and the other device whether or not the router is broadcasting or sending to a specific IP address.
     
  6. merlin_72032

    merlin_72032 Notebook Evangelist

    Reputations:
    117
    Messages:
    523
    Likes Received:
    0
    Trophy Points:
    30
    No it won't. You can't possibly capture the traffic between the router either because router separates and stops broadcast. You will see only ARP request, but there is nothing more.

    If you want to capture the packet, you have to mirror the port on the switch or connect the server into a hub.
     
  7. WarlordOne

    WarlordOne Notebook Evangelist

    Reputations:
    99
    Messages:
    406
    Likes Received:
    3
    Trophy Points:
    31
    What are you trying to do? If you want to keep people of your network secure it and enable MAC filtering.