You don't need to be an 'investor' to invest in Singletrack: 6 days left: 95% of target - Find out more
Is it possible to do this? I am trying to identify all devices using our wifi. I can login to the modem and see a list of all active devices showing a name, an IP address and a MAC number. I have eliminated all but one and linked them to actual devices, I have checked the MAC numbers of all our devices - laptops, phones, desktop, iPad, TV, kindles. An online check on the MAC number shows it is an Amazon device.
For context, we are foster carers with three children in placement and I need to monitor their internet usage and can't be sure that they have told me about all their devices. I guess I could block that number and see who complains...
there are MAC address checkers online - I think the first few digits tells you which manufacturer the MAC address range is assigned too.
I'd guess someone has a Kindle, FireStick, or something if it's Amazon.
Yup any router can block a MAC address. That's one way of finding which device is being naughty, or going "oh yeah, I forgot about that device"
Any clever IT geek can change their MAC address, at least on a Laptop, with one single command (I do this to get more free WiFi in places that only give you an hour free - turn off WiFi, change MAC, turn on WiFi, get more internetz, rinse and repeat).
Apart from the vendor info, it'll be difficult to get the information, and not aware of an easy way to get it. And even some devices will have a generic vendor ID from some OEM chipset supplier.
EDIT : Ambiguous. I meant only the vendor info will be easily available.
I guess I could block that number and see who complains…
It's what I'd do, you can always unblock it again. Even outside of your specific use case, I'd rather know what all the devices on my network are.
The first six (IIRC) digits of a MAC address signify the manufacturer - they're allocated out to avoid duplication, a bit like IP subnets. You can look these up online, as you've already found.
Beyond that it's down to individual manufacturers what they do with them so you're unlikely to get much more granular than "Amazon" unless that particular manufacturer provides some sort of lookup for their own devices (and I don't recall ever seeing such a thing).
Just tell them that you have a responsibility to keep them and their data safe online. Then block everything by default, and only allow the MAC addresses on your list. If they have something they want to attach to your wireless, they have to tell you and get it added to the list.
What torsoinalake said: most routers have a 'only allow connections from this whitelist' mode for wireless, so that's fairly easy to setup. Just remember to add your own laptop first...
If you want to restrict internet use somewhat then I've heard good things about https://www.opendns.com/home-internet-security/, specifically the Family Shield setup. A friend has a "Kids wifi" network which the kids get access that uses the Family Shield DNS servers. A sufficiently clued up kid can override the DNS settings locally, but its a step in the right direction.
If you *really* want to monitor then get a Ubiquti router and turn on deep packet monitoring. You'll be able to track what applications and even what web pages anyone is accessing.
Sorted, thanks to @andytherocketeer. I'd forgotten about the Firestick still plugged into the TV and not used since we got a smart TV.
Thanks also to @rossburton for info on OpenDNS. I already use their servers but will look at Family Shield.
Not what you asked, but I use iNet app on my phone to show the devices on the network. Might be useful.
Using device MAC addresses was how I controlled Slack jrs’ internet access over the last few years leading up to his GCSE’s.
I decided that I wouldn’t / couldn’t second guess any web sites he went to but I could, via my modem router admin/back office UI, control times and days of access. Otherwise, as has been ably proved since he finished his exams in June and I disabled the access control rules, he would have spent all night online gaming.
NB You can change the MAC address in a lot of devices eg Macbooks, a colleague has a script which does this so you can circumvent the free WIfi for 60 min thing at airports, every 60 mins it assigns a randomly generated new MAC address to his MBP.....
Yup one can (temporarily) change the MAC address on practically any PC (which includes Windows/Mac/Chromebook/Linux etc.), Android device, etc.
Might need admin or superuser privileges to do so though.
Even easier still on a Raspberry Pi, cos the address you want is just stored in a config file.
I really ought to create a script to do it on my chromebook, but in reality, all I need to do is hit up arrow to recall last command, change 1 digit, then hit enter.
Why pay for more wifi when I can simply pretend to be someone else and get another hour free, with fewer key presses and mouse clicks than are needed for registering and paying? 🙂
If the OP blocks connections by default and only whitelists those MAC addresses that are known, then the only difference changing them on the device is going to make is that it won't be able to connect any more.
.\f_my_wifi_up.ps1
True...
unless one does something clever like disable wifi on the phone (or raspberry pi etc.), change MAC on yer PC to be the one used by that other device that is whitelisted (or any other device that's likely to be off, or the old TV/firestick that's been forgotten), then game away all night while pretending to be doing homework.
white/blacklisting by MAC works only because 99.999% of people have no idea that they're not really fixed.