[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]
On 13/01/14 16:41, Tremayne, Steve wrote:
The ARP MAC list on my router is called the DHCP server client list. The list has 5 fields, ID (just 1, 2, 3, 4 etc), Client name, MAC address, IP address and Valid Time. I don't know what valid time means although permanent for reserved addresses is obvious enough. Otherwise, 23:18:01 seems pretty vague as the client has been connected approximately 1 hour and the time is 09.53 am. The unknown connection had a Valid time of 00:18:something IIRC.AFAIK, changing the MAC address is only possible on devices which allow the driver to report a different (usually manually entered) MAC address. Some (most?) Linux distros have the ability to alter the MAC address, which seems to be only really of benefit for penetration testing, etc. I'd go back to noting the MAC address on the device, reboot the device, then check it on the device again - unless you've done something yourself, the MAC should be static. Then, as a separate exercise, see what's authenticating against your wifi - perhaps you're in a busy area and other devices are trying to connect to your wifi. I'd guess (without checking) that any device just trying to associate with your wifi would show up in the ARP MAC list, whether they could actually authenticate or not.
-- The Mailing List for the Devon & Cornwall LUG http://mailman.dclug.org.uk/listinfo/list FAQ: http://www.dcglug.org.uk/listfaq