Ntopng ghost hosts?
-
This post is deleted! -
@deanfourie
Some info here
https://www.ntop.org/ntopng/detecting-hidden-hosts-and-networks-on-your-shared-lan/ -
Ok, have read that article. There is no misconfiguration of network, I can confirm all device are on a /24.
Upon further investigation, If I keep running the scans, the ghost man moves between different clients. Also, one clients IP address keeps turning into a IPv6 address?
This does look very suspect!
Any other input? There have been weird things going on!
-
Not to mention that while the client is detected as a "Ghost Client" I cannot view any information on this client such as flows etc.
-
bump, can someone maybe shed some light on this.