Had DHCP running all night and only found 2 useless macs

[tommy2426]

Hi never had trouble with sniffer b4, usually let it run and i get a load the next day, woke up the is morning and i had 2, anyone else having the same problem?

[andyjill]

Originally Posted by tommy2426

Hi never had trouble with sniffer b4, usually let it run and i get a load the next day, woke up the is morning and i had 2, anyone else having the same problem?

Make sure you use brute force

[tommy2426]

im sure i read a while ago that you shpuldnt use bruteforce anymore, but if its going to work i'll try anyhing, cheers, saying that i have about 500 here i've tried and not had any luck so far lol,

[tommy2426]

still getting nothing from sniffer, tried brutefore with a couple ie 00:22 and all i got was a load of 00:22, so i thought i'd try with 00:04 and 00:08 but got nothing, so turned bruteforce off and its been going for about 6 hours now and i haven't got 1, i have no idea why this is happening, i've recently received the new VM hub modem, don't know if that has any bearing

[TheCoder]

Originally Posted by tommy2426

still getting nothing from sniffer, tried brutefore with a couple ie 00:22 and all i got was a load of 00:22, so i thought i'd try with 00:04 and 00:08 but got nothing, so turned bruteforce off and its been going for about 6 hours now and i haven't got 1, i have no idea why this is happening, i've recently received the new VM hub modem, don't know if that has any bearing

Because VM are slowly migrating pretty much everything over to the new Docsis3 overlay. The only stuff left will be the lower speed stuff and, as most people (subscribers) tend to leave there modems permanently switched on, there are now very few DHCP requests. Its not uncommon these days to only see half a dozen requests in any hour through the complete MAC range.

Active brute forcing is also now a very bad idea. If normally there are only a few requests per hour it looks mighty suspicious for a few thousand to occur in a few minutes. Bulk DHCP requests tend to only happen after a serious network problem or a power outage. Active brute forcing never was a good idea, now its a dead giveaway (and yes, you can be partially traced by it as it all originates from one UBR line - thats only 250 or so homes) !

[G77]

so when your subbed goes off due to network problems, get passively scanning!