I haven't tried it myself yet, but I'd imagine that disabling WPS and/or UPnP (which WPS often makes use of) on the gateway might make the 254 host disappear.
If you've got a Cisco Router/Gateway, perhaps you can skip the Wireshark step, and just try that URL on the IP your mystery host shows up at. Browsing that url provided model information identifying my XFinity/Cicso Gateway. What I saw were some SSDP notification messages. I discovered that info by firing up Wireshark and watching for traffic to/from the 10.0.0.254 address. OUI Lookup Tool The Wireshark OUI lookup tool provides an easy way to look up OUIs and other MAC address prefixes It uses the Wireshark manufacturer database which is a list of OUIs and MAC addresses compiled from a number of sources Directions: Type or paste in a list of OUIs MAC addresses, or descriptions below, OUIs and MAC addresses may be. But on the 10.0.0.254 address it seems to be hosting a server that supports the gateway's Wireless Protected Setup (WPS) feature. In my case the culprit was my Xfinity Wireless Gateway (a Cisco model), which is set up to work at 10.0.0.1. But since this page has 5K views, I thought others might still be interested in my answer.Īn nMap scan of my network showed a TCP listener on 10.0.0.254:49152 (mac 00:05:04:03:02:01). I found a similar mystery host on my network, and ended up here looking for an answer, 2+ years since the last update :).
0 kommentar(er)
