7 ms·
My Ubiquiti UniFi UDM is not good at device identification. It's kind of annoying because I have this big list of devices on the network and it's peppered with
by yakz 3y ago
My Ubiquiti UniFi UDM is not good at device identification. It's kind of annoying because I have this big list of devices on the network and it's peppered with devices that I know don't exist. I'd appreciate it if it said something like "Maybe iPad Air", instead of just "iPad Pro 2nd Gen" when I know no such device is on my network.
- stock_toaster 3y agoios devices (unsure about android) use random MACs on wireless networks by default. https://support.apple.com/en-us/102509 https://support.apple.com/en-us/102509
- vsgherzi 3y agoRandom aside for this, I believe this functionality existed for many years but actually hasn’t worked until recently. (Take this with a grain of salt)
- fifilura 3y agoI had to turn random MAC off, my google mesh could not handle it. Wifi on my samsung phone would only work for a couple of minutes.
- justusthane 3y agoThe random MAC would still be within the vendor prefix though, and a MAC address won’t identity a specific device type anyway. Edit: I’m wrong
- epcoa 3y agoNo it isn’t, vendor prefixes are sort of an anachronism. Bit 41 - bit 1 of the first octet is reserved for local (random) use. That and the group bit (40) set to 0 means the second digit of the human readable MAC is 2, 6, A or E, but that’s it.
- justusthane 3y agoMy bad, thanks for the correction! You still can’t identify a specific device type based on the MAC address though, right?
- lathiat 3y agoOn the same WiFi network yes you can - it uses the same MAC on the same SSID. Remembers the "random" MAC after the first connection (and if you first connected to the networks before they added MAC randomisation in iOS14, it "remembers" the actual MAC of the device, so you didn't have compatability issues after the iOS14 upgrade). So you can't use it to track devices between multiple SSIDs including when scanning for networks, but you can use it to persistently identify a device when connected to the same network.
- ThePowerOfFuet 3y agoYou misread the question.
- lathiat 3y agoYep, you're right. Agree with the other post - the randomly generated MACs have no manufacturer info.
- ThePowerOfFuet 3y agoOther than perhaps the manufacturer from the OUI, no.
- epcoa 3y agoThere’s no manufacturer in a randomly generated local OUI.
- manwe150 3y agoThe random MAC is generated only once per network, and re-used for every subsequent future connection to it, until the network settings are reset
- NelsonMinar 3y agoThe traffic stats my UDM shows are complete fiction. The data it presents makes no sense.
- neilv 3y agoDo the UniFi products just try to use MAC addrs for this, or do passive/active TCP/IP fingerprinting?
- wkat4242 3y agoYou can fix this by setting fixed IPs. But yes Unifi is not great at this.
- Gyrantula2 3y agoOccasionally it's fun to discover new devices. "It thinks my WiFi dog feeder is a Technoelectrocom 56XR-2000? What the hell is (was) that?"
- paradox460 3y agoI found out that unifi plug in doorbell chimes use an esp32 this way because I saw one on my devices table, before it had booted fully and handshook as it's real Identity
- Gyrantula2 3y agoDo you mean the non-PoE version? I have the PoE version sitting in a box somewhere and I'm a ESP32 enthusiast so I'm wondering if that's what I'll be doing today. Surely they're using it just as a WiFi coprocessor? Or...?
- paradox460 3y agoThe non PoE one, the one that just plugs into a normal power outlet My PoE one has only ever identified as what Ubiquiti thinks it is, so no idea
- Saris 3y agoMost personal devices now use randomized MACs so it's hard to ID them. You can go via IP though, pull up your DHCP lease on your phone/laptop/whatever and match it to the same IP in Unifi, then manually name the device.
- nubinetwork 3y agoCisco ISE thinks all iPhones are FreeBSD.
- doubleg72 3y agoThat’s because your profiling is not set up correctly
- nubinetwork 3y agoI didn't set it up. :)