Community discussions

 
mpixel
newbie
Topic Author
Posts: 31
Joined: Wed Jun 24, 2009 9:58 pm

Unknown device in ARP list with IP and without MAC

Tue Apr 30, 2019 10:39 am

I have unknown device in ARP list.
With IP address but without MAC address.
Only Flag "dynamic"

How do I find out what this device is ?

I thought every device must have a mac address.
 
User avatar
Jotne
Forum Guru
Forum Guru
Posts: 1310
Joined: Sat Dec 24, 2016 11:17 am
Location: jo.overland at gmail.com

Re: Unknown device in ARP list with IP and without MAC

Tue Apr 30, 2019 11:11 am

Does it show up in your DHCP-server?
/ip dhcp-server lease print
 
How to use Splunk to monitor your MikroTik Router

MikroTik->Splunk
 
 
mpixel
newbie
Topic Author
Posts: 31
Joined: Wed Jun 24, 2009 9:58 pm

Re: Unknown device in ARP list with IP and without MAC

Tue Apr 30, 2019 12:58 pm

I can´t see it in DHCP Leases.


You can see in attached pictures.
IP 10.10.110.31
You do not have the required permissions to view the files attached to this post.
 
Exiver
Member Candidate
Member Candidate
Posts: 113
Joined: Sat Jan 10, 2015 6:45 pm

Re: Unknown device in ARP list with IP and without MAC

Tue Apr 30, 2019 1:17 pm

That happens when your router tries to reach that address but no device is answering (ARP)

You can easily try this out:

* Check /ip arp
* Try to ping an address which is not in use
* Check /ip arp again
You do not have the required permissions to view the files attached to this post.
 
mpixel
newbie
Topic Author
Posts: 31
Joined: Wed Jun 24, 2009 9:58 pm

Re: Unknown device in ARP list with IP and without MAC

Tue Apr 30, 2019 6:11 pm

Why does my router try to reach that address?

I don´t have such ip address in DHCP.

ping 10.10.110.31
timeout
 
Exiver
Member Candidate
Member Candidate
Posts: 113
Joined: Sat Jan 10, 2015 6:45 pm

Re: Unknown device in ARP list with IP and without MAC

Tue Apr 30, 2019 6:24 pm

It doesnt mean that only your router tried to reach that address. Could be some device in another subnet for example. The timeout is expected since that device is not reachable. It was just to show you that the entry appears in dhcp-server leases with only "D"-Flag and without mac-address...
 
mpixel
newbie
Topic Author
Posts: 31
Joined: Wed Jun 24, 2009 9:58 pm

Re: Unknown device in ARP list with IP and without MAC

Tue Apr 30, 2019 6:37 pm

But how do I know which device is it in our network when I don't even know its MAC address?
 
Exiver
Member Candidate
Member Candidate
Posts: 113
Joined: Sat Jan 10, 2015 6:45 pm

Re: Unknown device in ARP list with IP and without MAC

Thu May 02, 2019 2:35 am

The device is not in your network... Some other device has tested whether this ip is active or not. It seems to be not active. If you want to know which device asked for that ip you need to log arp messages on your L2 network and search them when somthing similar happens again..
 
mpixel
newbie
Topic Author
Posts: 31
Joined: Wed Jun 24, 2009 9:58 pm

Re: Unknown device in ARP list with IP and without MAC

Fri May 03, 2019 3:25 pm

It happens continuously. Apparently some device is looped.

Will you advise me how to do this?
I don't know what to log. I want to know MAC address of this device -then I will be able to find a vendor and thereby reduce the list of possible devices narrowed down, for example, to printers or mobile phones

Who is online

Users browsing this forum: Google [Bot], MSN [Bot] and 41 guests