Question Ping with unlimited replies

naviseyer

Distinguished
Nov 8, 2016
84
0
18,530
So i have been noticing some oddities on my small office network. Today since the office is closed i decided to come in and really dig in to find out whats going on.

I used an Ip scanner to scan the network and i also did cmd ARP -a . Everything appeared fine but there was 1 IP address that came up as private
when i ping this IP address i keep getting the reply over and over . Like its stuck in a loop ..

I have no idea what could cause this to happen and cant find anything about it anywhere .

Has anyone had this happen ? Anyone have any ideas what or why ?

thanks in advance for any help

Ive
 
It almost has to be some issue with the pc you are doing the scanning from. If the IP is in a different subnet it will send the ping to the gateway IP....doesn't matter if it is a private or public ip if it is outside the subnet it is sent to the gateway. You should only get 1 response. Now if you ping some kinda of broadcast IP you can get multiple responses. The ability to ping the broadcast IP is disabled or restricted in many OS and equipment because it can be used for denial of service attacks.

I would capture the traffic with wireshark. You will see the mac address the data is coming from and that should help you track it down.
 
Im not sure if its the ipscanner software i am using but i am getting multiple IP addresses for the same workstations. Some workstations come back in with 3 IP addresses. We use VOIP phones so 2 ip addresses one for the phone and 1 for the workstation would be normal but 3 or more is definatly means somethings wrong is there a way i can figure this out without going to each workstation and each phone ?
Im wondering if the scanner software i am using is keeping a memory of previous scans ?

thanks for any help
Ivan