Identify devices in router beside IP, MAC or Device-name

Hi David Johnson, CD

did you confirm that the unknown ip address and lookup the mac address 

Hi David Johnson, CD,

I tried your recommendation in matching the IP address but could find (I was sure there was some sort, but I guess I hace to wait until it happens again)

When u say "rogue dhcp server somewhere in your network", can u give an example?


Hi Gerwin Jansen,

you are using Apple devices right

They can generate random MAC addresses to connect to (known) networks. 

I haven't noticed this on Apple devices.  However, I did see this happened in an outdoor cam; I noticed that when first connecting the cam to the WIFI router, it generated like some sort of it's own network, then I connected then it disconnected from its created network (something like that)

when its a network device check lldp and cdp

How do you check lldp and cdp?

Cisco Discovery Protocol (CDP) is a proprietary Data Link Layer protocol developed by Cisco Systems in 1994 by Keith McCloghrie and Dino Farinacci. It is used to share information about other directly connected Cisco equipment, such as the operating system version and IP address.

The link layer discovery protocol (LLDP) is an open and extendable part of the Internet protocol suite used in IEEE 802 to advertise a device’s identity and abilities, as well as other devices connected within the same network.

use wireshark and filter by these protocols

Thank u.  There is no CDP or LLDP in the network

lldp is used by windows devices .. It would help if you identified your router?  Advanced IP Scanner might help in scanning your network

Hi Experts, before continuing, I want to make sure I myself with my low-tech-knowkledge may be diverting the question.  So I just reread the question for more clearer view of my problem or question:

• Strange behavior on the router
• An IP would appear as unknown
• When I check that IP, it was an IP of current device
• I check said device and it has a different IP
• I also made sure the devices' IP is automatic not manually set (so I didn't change it)
• Then I noticed change of IP in an outdoor cam
• When first connecting the cam to the WIFI router, it generated like some sort of it's own network (an IP)
• After finished install, that IP was no more

A couple of days back I was having a conversation with a colleague where she mention that some devices before connecting to ones router would create a network, do it "stuff" disconnect from it's network then install in ones router (she something similar with Ring cams).

So maybe is something like Gerwin Jansen says, about MAC address randomization but in for these devices.  I just went to the Status >> Wireless screen of my router and saw 3 devices with MAC address but no IP.  I went to a MAC address lookup online (I think it was David recommendation in another question) and found 2 of ther were "Lg Innotek" and "Mitsumi Electric Co.,Ltd"

What u guys think is causing a MAC address device stay in the Status screen?

David, what does windows do with Link Layer Discovery Protocol ?

LLDP is designed off CDP. its a discovery protocol on network devices.

Just want to recap on my question, rereading it it directs to the following::

• An IP would appear as unknown
• When I check that IP, it was an IP of current device
• I check said device and it has a different IP
• I also made sure the devices' IP is automatic not manually set (so I didn't change it)
• Then I noticed change of IP in an outdoor cam
• When first connecting the cam to the WIFI router, it generated like some sort of it's own network (an IP)
• After finished install, that IP was no more

A couple of days back I was having a conversation with a colleague where she mention that some devices before connecting to ones router would create a network, do it "stuff" disconnect from it's network then install in ones router (she something similar with Ring cams).

So maybe is something like Gerwin Jansen says, about MAC address randomization but in for these devices.  I just went to the Status >> Wireless screen of my router and saw 3 devices with MAC address but no IP.  I went to a MAC address lookup online (I think it was David recommendation in another question) and found 2 of ther were "Lg Innotek" and "Mitsumi Electric Co.,Ltd"

What u guys think is causing a MAC address device stay in the Status screen? 

Frustratingly, Microsoft's implementation of NetLldpAgent just reports your current MAC address to the switch, which is pretty pointless.

Thank u.  Couple of things prior closing the question,

• When first connecting the cam to the WIFI router, it generated like some sort of it's own network (an IP) - u have any knowledge of this? a device creating it own network or IP prior connectiing to the router?
• Also, I would like to read more on the behavior you mention on "NetLldpAgent just reports your current MAC address to the switch", Is there any links I can view that behavior

the camera reboots and connects to the home network 

Thank u for the info.  Is it possible that the this behavior leave an orphan IP in my network? or a MAC address?
 
Also, I would like to read more on the behavior you mention on "NetLldpAgent just reports your current MAC address to the switch", Is there any links I can view that behavior? (I searched for it and it's so much info I can't isolate to "NetLldpAgent just reports your current MAC address to the switch")

Where do you see 'orphan IP' addresses in your network?

• Notice the circled MAC address, there is no IP (I meant more on the orphan MAC not IP, sorry about that).

Would the above apply to your comment?

Understood.

Thank u, good info! Helped a lot with what I am doing here!