This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

unknown person using my network

0

I log into my netgear router to see if there are any intruders and at the same time I run wireshark. when I checked my router log there were 3 devices logged in and they belong to me. the 3rd device has an IP address ending with ..**.04, but when I see wireshark capture I see another device with .05 ending IP I have attached the screen shot pls help. alt text I want know to which device is using ip 10.99.1.5.

asked 28 Apr '17, 01:45

w_keyboard's gravatar image

w_keyboard
6●5●5●7
accept rate: 0%

One Answer:

0

Either look into your Netgear router logs, or look at this frame details for the MAC address OUI which may give away the manufacturer of the network interface. This may get you started on your search.

PS: Never attach screen shots! Provide a link to a capture file instead.

answered 28 Apr '17, 02:22

Jaap's gravatar image

Jaap ♦
11.7k●16●101
accept rate: 14%

Is it safe to attach the capture file here in the forums ? and how to attach it ?

(28 Apr '17, 04:02) w_keyboard

The capture file will be as accessible as this Q&A, so unlimited.

(28 Apr '17, 04:04) Jaap ♦

Captures should be shared in a publicly accessible spot, e.g. CloudShark, Google Drive, Dropbox, etc.

(28 Apr '17, 04:10) grahamb ♦