+ Post New Thread
Results 1 to 14 of 14
Wireless Networks Thread, Rogue Device in Technical; Does anyone know any software (preferably free) for tracking down a rogue device. I have this device in DHCP called ...
  1. #1
    steve_nfi's Avatar
    Join Date
    Nov 2007
    Location
    Central London
    Posts
    290
    Thank Post
    149
    Thanked 24 Times in 20 Posts
    Rep Power
    18

    Rogue Device

    Does anyone know any software (preferably free) for tracking down a rogue device.
    I have this device in DHCP called 'AD-Converter'. I know the IP address and the MAC address. What I want to know is what it is and where it is.
    Anyone got any ideas please?

  2. #2

    tech_guy's Avatar
    Join Date
    May 2007
    Location
    That little bit in the middle of Little Old England
    Posts
    8,131
    Thank Post
    1,907
    Thanked 1,342 Times in 741 Posts
    Blog Entries
    3
    Rep Power
    395
    You've got an analogue to digital device on your network - you got a digital tv signage system? Or to do with your CCTV?

  3. Thanks to tech_guy from:

    steve_nfi (16th October 2009)

  4. #3

    Join Date
    Mar 2009
    Location
    West Yorkshire
    Posts
    67
    Thank Post
    12
    Thanked 6 Times in 6 Posts
    Rep Power
    15
    Do you have managed switches that you can trace MAC addresses by port connection?

  5. #4
    steve_nfi's Avatar
    Join Date
    Nov 2007
    Location
    Central London
    Posts
    290
    Thank Post
    149
    Thanked 24 Times in 20 Posts
    Rep Power
    18
    Quote Originally Posted by tech_guy View Post
    You've got an analogue to digital device on your network - you got a digital tv signage system? Or to do with your CCTV?
    Come to thiink of it our Premises Manager had some work done to the CCTV system a couple of monnths ago. I'll have to check with him. This thing, whatever it is, is taking about 2/3 of our incoming bandwidth.

  6. #5
    steve_nfi's Avatar
    Join Date
    Nov 2007
    Location
    Central London
    Posts
    290
    Thank Post
    149
    Thanked 24 Times in 20 Posts
    Rep Power
    18
    Quote Originally Posted by chinesewhispers View Post
    Do you have managed switches that you can trace MAC addresses by port connection?
    Unfortunately not.

  7. #6
    mjs_mjs's Avatar
    Join Date
    Jan 2009
    Location
    bexleyheath, london
    Posts
    1,018
    Thank Post
    37
    Thanked 111 Times in 95 Posts
    Rep Power
    37
    Quote Originally Posted by steve_nfi View Post
    Unfortunately not.
    you should look into investing in layer 3 switching - the linksys 2024 are a good managed gigabit switch.

  8. #7
    steve_nfi's Avatar
    Join Date
    Nov 2007
    Location
    Central London
    Posts
    290
    Thank Post
    149
    Thanked 24 Times in 20 Posts
    Rep Power
    18
    We are just in the process of getting quotes in to have most of our switches replaced. They are fairly old now and although managed to a certain degree, they can't do what you seem to be able to do on modern switches.

  9. #8

    mac_shinobi's Avatar
    Join Date
    Aug 2005
    Posts
    9,680
    Thank Post
    3,210
    Thanked 1,030 Times in 955 Posts
    Rep Power
    361
    Not sure about free but you should be able to use LAN View on its trial period to find the device

    LANView is a powerful tool for LAN administration

    That or wire shark ?

  10. #9
    steve_nfi's Avatar
    Join Date
    Nov 2007
    Location
    Central London
    Posts
    290
    Thank Post
    149
    Thanked 24 Times in 20 Posts
    Rep Power
    18
    I have lanview running on our system and this thing doesn't show up.
    It's still got the same IP and you can ping, I just can't find what and where it physically is.

    Refering to an earlier post about the CCTV. Apparently the CCTV is all hard wired and doesn't touch the network. Back to square one.

  11. #10

    mac_shinobi's Avatar
    Join Date
    Aug 2005
    Posts
    9,680
    Thank Post
    3,210
    Thanked 1,030 Times in 955 Posts
    Rep Power
    361
    Quote Originally Posted by steve_nfi View Post
    I have lanview running on our system and this thing doesn't show up.
    It's still got the same IP and you can ping, I just can't find what and where it physically is.

    Refering to an earlier post about the CCTV. Apparently the CCTV is all hard wired and doesn't touch the network. Back to square one.
    Tools --> Lookup host

    Enter in the IP Address and search and it should show up the hostname which may or may not make it easier ?

    If not as above wire shark

    http://www.wireshark.org/

    Others on here may have more experience of using wire shark which I don't
    Last edited by mac_shinobi; 16th October 2009 at 08:40 AM.

  12. Thanks to mac_shinobi from:

    steve_nfi (16th October 2009)

  13. #11

    Join Date
    Oct 2007
    Location
    Lincolnshire
    Posts
    133
    Thank Post
    0
    Thanked 22 Times in 22 Posts
    Rep Power
    17
    If you don't have managed switches you'll just have to search using a 'divide and conquer' approach. Set up a continuous ping to your mystery device and then, starting at the middle of your network, disconnect a branch for a moment. If you lose a ping you know the device is on that branch. Do the same thing further down that branch, and repeat until you're down to a single port. It sounds like a long job but it doesn't take too long.

  14. Thanks to keithu from:

    steve_nfi (16th October 2009)

  15. #12
    steve_nfi's Avatar
    Join Date
    Nov 2007
    Location
    Central London
    Posts
    290
    Thank Post
    149
    Thanked 24 Times in 20 Posts
    Rep Power
    18
    Heres a network monitoring free package

    MikroTik Routers and Wireless

    Seems pretty good. Just trying to decypher it. Probably easy to the more technically adept.

  16. #13
    steve_nfi's Avatar
    Join Date
    Nov 2007
    Location
    Central London
    Posts
    290
    Thank Post
    149
    Thanked 24 Times in 20 Posts
    Rep Power
    18
    Quote Originally Posted by mac_shinobi View Post
    Tools --> Lookup host

    Enter in the IP Address and search and it should show up the hostname which may or may not make it easier ?
    I don't appear to have a tools option on mine. I have a client tools radio button but there isn't a Lookup host option on that. I'm running Lanview v3.1.9.

  17. #14
    budgester's Avatar
    Join Date
    Jan 2006
    Location
    Enfield, Middlesex
    Posts
    485
    Thank Post
    4
    Thanked 37 Times in 30 Posts
    Rep Power
    24
    How do you do your routing to the internet ?

    Has this device picked up a IP address from your DHCP server ?

    Could you assign a fixed lease to the device, and then route/block any traffic from the devices ip address ?

    Then when it breaks it someone will come and find you.

SHARE:
+ Post New Thread

Similar Threads

  1. City of Heroes is Going Rogue
    By CAM in forum Gaming
    Replies: 2
    Last Post: 15th May 2009, 01:33 PM
  2. AP's with rogue AP detection
    By Jobos in forum Wireless Networks
    Replies: 1
    Last Post: 2nd March 2009, 06:20 PM
  3. Possible rogue update - I did say 'possible'
    By acrobson in forum Wireless Networks
    Replies: 3
    Last Post: 26th June 2008, 09:26 PM
  4. Rogue Laptops on Network
    By acrobson in forum How do you do....it?
    Replies: 3
    Last Post: 22nd June 2007, 09:34 AM
  5. Rogue Devices
    By palmer_eldritch in forum How do you do....it?
    Replies: 20
    Last Post: 25th April 2007, 12:30 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •