We had this one time. it was a load balancer misconfigured. Every time any IP came up on the network it was grabbed butt the load balancer. Found it from a bridge table scan if I remember right.
On Sun, Jul 2, 2017, 3:34 PM Jaime Solorza <[email protected]> wrote: > Open cmd and run arp -a several times ...try it after rebooting router or > appliance handing out DHCP. I had a wireless time clock causing similar > issues. I assigned it a static IP address and no more issues. > > > Jaime Solorza > > On Jul 2, 2017 1:58 PM, "Sterling Jacobson" <[email protected]> wrote: > >> I can't seem to trace it because the request comes, grabs an IP with this >> device name, then leaves and is off the ARP table. >> I don't think it's all at once, I think it happens slowly over a period >> of a few hours or a day. >> >> MAC always begins with 70:4c:ed which Wireshark identifies as TMRG, Inc. >> >> I have no idea what device TMRG, Inc. makes. >> >> Anyone ever seen this before? >> >> Is this an actual device with multiple MACs grabbing multiple IPs, or is >> it a slew of devices hanging off my network somewhere? >> >> That's what I can't figure out. >> >
