G+_Rud Dog Posted March 8, 2016 Share Posted March 8, 2016 What's on my LAN? This question has been elusive for sure, you can run something like Advanced IP Scanner on Windows and it will show you all the connected devices on your LAN by using 192.168.1.0-192.168.1.254. But what about those that are hiding on my LAN not of this set of IP addresses? Then ran into this console command(arp -r) and found some IP addresses I had never seen before on my LAN. They were: 224.0.0.2 224.0.0.22 224.0.0.251 224.0.0.252 239.192.152.143 239.255.255.250 The second to the last from above list was interesting so moving on. Advanced IP Scanner has the ability to add to a list which you can import when you run the scanner and will look up the range of IP address you placed in it, like: 192.168.1.0-192.168.1.254 So I added: 239.192.152.0 - 239.192.152.254 Now had read these addresses were either a internal IP address or private or reserved IP addresses which manufactures used as there default access IP address for setup . So sent my trusty Advanced IP Scanner off to gather all the devices online using either of the two sets I had found; 192.168.1.0-192.168.1.254 and 239.192.152.0-239.192.152.254. Ran it and it listed all my active devices under using the 192.x.x.x set great. Next it listed every single one of the addresses for the 239.x.x.x? not the active ones is my thinking but every one between the 0 and 254 Was wondering if anyone could help me understand what I was seeing? Link to comment Share on other sites More sharing options...
G+_RJ Davis Posted March 8, 2016 Share Posted March 8, 2016 Take a look at multicast ranges or specifically Link Local Multicast Name Resolution (LLMNR) Link to comment Share on other sites More sharing options...
G+_Steve Martin Posted March 8, 2016 Share Posted March 8, 2016 RJ Davisis correct. 224.0.0.0/4 (range: 224.0.0.0-239.255.255.255) addresses are MultiCast addresses that are universal and used by services like mDNS. For a list of typical addresses: http://www.iana.org/assignments/multicast-addresses/multicast-addresses.xhtml Link to comment Share on other sites More sharing options...
G+_Rud Dog Posted March 8, 2016 Author Share Posted March 8, 2016 What is the deal with 239.192.152.x addresses? Running the scanner writes back every address for that group even though don't have more then maybe one. Link to comment Share on other sites More sharing options...
G+_Rud Dog Posted March 9, 2016 Author Share Posted March 9, 2016 Trying to understand what is happening and what I am seeing when I scan the range of 239.192.152.0-239.192.152.254. In "Advanced IP Scanner" it returns every address in that range from 239.192.152.0 thru 239.192.152.254 along with the MAC addresses accssiated with those IP addresses. My though was "Advanced IP scanner" would only return those that it found active on your LAN? Here is the output from "AIPS" Status Name IP Radmin Http Https Ftp Rdp Shared folders NetBIOS group Manufacturer MAC address User Comments Ok 239.192.152.254 239.192.152.254 01:00:5E:40:98:FE Ok 239.192.152.253 239.192.152.253 01:00:5E:40:98:FD Ok 239.192.152.252 239.192.152.252 01:00:5E:40:98:FC Ok 239.192.152.251 239.192.152.251 01:00:5E:40:98:FB Ok 239.192.152.250 239.192.152.250 01:00:5E:40:98:FA Ok 239.192.152.249 239.192.152.249 01:00:5E:40:98:F9 Ok 239.192.152.248 239.192.152.248 01:00:5E:40:98:F8 "Shortened the list to avoid taking up to much space" Ok 239.192.152.14 239.192.152.14 01:00:5E:40:98:0E Ok 239.192.152.13 239.192.152.13 01:00:5E:40:98:0D Ok 239.192.152.12 239.192.152.12 01:00:5E:40:98:0C Ok 239.192.152.11 239.192.152.11 01:00:5E:40:98:0B Ok 239.192.152.10 239.192.152.10 01:00:5E:40:98:0A Ok 239.192.152.9 239.192.152.9 01:00:5E:40:98:09 Ok 239.192.152.8 239.192.152.8 01:00:5E:40:98:08 Ok 239.192.152.7 239.192.152.7 01:00:5E:40:98:07 Ok 239.192.152.6 239.192.152.6 01:00:5E:40:98:06 Ok 239.192.152.5 239.192.152.5 01:00:5E:40:98:05 Ok 239.192.152.4 239.192.152.4 01:00:5E:40:98:04 Ok 239.192.152.3 239.192.152.3 01:00:5E:40:98:03 Ok 239.192.152.2 239.192.152.2 01:00:5E:40:98:02 Ok 239.192.152.1 239.192.152.1 01:00:5E:40:98:01 Ok 239.192.152.0 239.192.152.0 01:00:5E:40:98:00 Link to comment Share on other sites More sharing options...
Recommended Posts