[SOLVED] What's the easiest way of tracking outgoing traffic from specific IP address?

Newtonian

Distinguished
Sep 9, 2013
33
0
18,530
0
I have unidentified devices connected to my network that show up as "new-host-1 (or 2, etc)" on my FiOS router.
Their MAC addresses reveal no vendor.
This seems to have baffled other FiOS customers too. https://forums.verizon.com/t5/Fios-Internet/What-is-New-Host/td-p/845062

Since I already know the IP addresses of these mysterious devices, if I could track their outgoing traffic, maybe I'll have a better clue of what they are.
What's the easiest way of tracking outgoing traffic from these specific IP address?
Should WireShark do the job?
 
Wireshark does a great job problem is it only sees data that passes through the etherent port on the machine.

You can not run wireshark on the router, well some can if you load third party firmware but not a fios router.

I would first turn off the wifi radios and see if it goes away. May take some time for it to time out but if it responds to a ping command that will fail immediately.

If it is still around I would unplug cables 1 at a time until it goes away should give you a idea.

Finding a wifi device can be tricky. Your best bet would be to make sure WPS is disabled since that will give out any new password you set. Change the wifi password. Nothing should now be able to connect even with the wifi radios on. Then one at a time put the new password into end devices.
 
Wireshark does a great job problem is it only sees data that passes through the etherent port on the machine.

You can not run wireshark on the router, well some can if you load third party firmware but not a fios router.

I would first turn off the wifi radios and see if it goes away. May take some time for it to time out but if it responds to a ping command that will fail immediately.

If it is still around I would unplug cables 1 at a time until it goes away should give you a idea.

Finding a wifi device can be tricky. Your best bet would be to make sure WPS is disabled since that will give out any new password you set. Change the wifi password. Nothing should now be able to connect even with the wifi radios on. Then one at a time put the new password into end devices.
 

ASK THE COMMUNITY