Ntopng ghost hosts?

deanfourie

This post is deleted!

bingo600

@deanfourie
Some info here
https://www.ntop.org/ntopng/detecting-hidden-hosts-and-networks-on-your-shared-lan/

deanfourie

Ok, have read that article. There is no misconfiguration of network, I can confirm all device are on a /24.

Upon further investigation, If I keep running the scans, the ghost man moves between different clients. Also, one clients IP address keeps turning into a IPv6 address?

This does look very suspect!

Any other input? There have been weird things going on!

deanfourie

@deanfourie

Not to mention that while the client is detected as a "Ghost Client" I cannot view any information on this client such as flows etc.

deanfourie

bump, can someone maybe shed some light on this.