Activity from multiple devices reported on one device

Follow

Peter Garrett

• November 05, 2024 16:02

Recently Zenarmor started reporting all activity against one device in 'Live Sessions' and 'Reports' even though multiple source IP's are indicated.  In devices, it is only detecting one device, with errors in the detail and category fields. Many devices are active but not detected.

I have tried with and without 'device identification' on, and have tried deleting the devices database.

I am running zenarmor 1.18.1 on OPNsense 24.7.7 with 40 devices on a home subscription.

Any suggestions?  Thanks.

0

• Official comment

  

  Salih

  • November 05, 2024 16:05

  Hi Peter,

  Thanks for reaching out and letting us know about the issue.

  Can you check Source MAC Address (Src HW)? If it is not existing in Live Sessions you can activate Src HW in Layout - Source Hardware Address. Is it the same for all sessions?

  Comment actions Permalink
• 

  Peter Garrett

  • November 05, 2024 16:11

  Under 'Live View/Details' it is the same Source MAC address for all even though the Source IP and Source Hostname are different for each.  It sounds like you might know what's up!

  0

  Comment actions Permalink
• 

  Salih

  • November 06, 2024 04:36
  • Edited

  Hi Peter,

  I see tour ticket. I’m going to investigate the logs and configuration and get back to you.

  0

  Comment actions Permalink

Please sign in to leave a comment.