Device repeatedly toggles IP address, until I reload fingsca

Karl:
I'm running Mac OS High Sierra (10.13.6), Indigo 7.4.1, and fingscan 7.31.54.
I have a problem that occurs intermittently, but once it starts, it goes on until I reload fingscan.
Then it goes quiet for awhile.

I also tried resetting all devices, but since that removes all the names I've assigned, Id rather not go that route again, and that didn't seem to help, anyway.
Oh, in case it matters, I currently have 33 IP devices known to fingscan.
This changes, of course, e.g., when my kids come to visit with their iPads, Mac/PCs and iPhones.
For awhile I tried to keep those devices around, but recently I deleted them all in case it helped with my issue -- it didn't.

I have a trigger set up to send me email on "IP Number of a device has changed". I'm attaching a screenshot of a few of those emails.
I should point out that the device that is allegedly changing IP address, has a STATIC IP - 192.168.0.125.
The address it toggles with is almost always bogus (un-ping-able). See attached screenshot for a small sample.
There are over 1000 emails from yesterday alone!

Occasionally I get other bogus changes, like this:

fingscan discovered IP device <Johns RetinaMac> changed IP address; was 192.168.0.031, now 192.168.0.031-double, vendor=<Apple>

How can it change to the address it already has?

What can I do to eliminate this behavior?
What can I do to help you troubleshoot?

Thanks!
A loyal user,
John Burgess

My experience is that Fingscan is actually correct.

I have some rpi that have Ethernet and WiFi enabled. Then when WiFi is off it still sometimes sends packages w the WiFi IP address

Check out the fing.log file ( don’t recall the exact name)

It should reflect the Ip changes written by fing.bin
That file is read by Fingscan and then the indigo device states are updated.

The changes form and to the same Ip # is different. I need to get some more details. Have not seen that one

You can suppress the logging and email of individual devices changing up numbers in their device edit screen

Karl


Sent from my iPhone using Tapatalk

the logfile:
/Library/Application Support/Perceptive Automation/Indigo 7.4/Preferences/Plugins/com.karlwachs.fingscan/fing.log

with my rpi that constantly changes ip numbers:

Code: Select all

2020/08/22 21:39:26;up;192.168.1.238;;;B8:27:EB:CF:D4:A2;Raspberry Pi Foundation
2020/08/22 21:39:26;up;192.168.1.240;;;B8:27:EB:CF:D4:A2;Raspberry Pi Foundation
...
2020/08/22 21:40:26;up;192.168.1.238;;;B8:27:EB:CF:D4:A2;Raspberry Pi Foundation
2020/08/22 21:40:26;up;192.168.1.240;;;B8:27:EB:CF:D4:A2;Raspberry Pi Foundation
...
2020/08/22 21:41:26;up;192.168.1.240;;;B8:27:EB:CF:D4:A2;Raspberry Pi Foundation
...
2020/08/22 21:42:26;up;192.168.1.238;;;B8:27:EB:CF:D4:A2;Raspberry Pi Foundation
2020/08/22 21:42:26;up;192.168.1.240;;;B8:27:EB:CF:D4:A2;Raspberry Pi Foundation


and you can ping the rpi with both IP numbers ..

Code: Select all

PING 192.168.1.240 (192.168.1.240): 56 data bytes
64 bytes from 192.168.1.240: icmp_seq=0 ttl=64 time=0.814 ms
64 bytes from 192.168.1.240: icmp_seq=1 ttl=64 time=0.503 ms
...
mini-21:48:59 ~ 98:ping 192.168.1.238
PING 192.168.1.238 (192.168.1.238): 56 data bytes
64 bytes from 192.168.1.238: icmp_seq=0 ttl=64 time=0.492 ms
64 bytes from 192.168.1.238: icmp_seq=1 ttl=64 time=0.503 ms


Karl

looking at the the fingscan code:

fingscan discovered IP device <Johns RetinaMac> changed IP address; was 192.168.0.031, now 192.168.0.031-double, vendor=<Apple>

this message means that another device has the same IP number (thats why the "-double" .. may be I should change that message a bit )

.. look at the fing.log file mentioned in the previous post. It will tell you more details, ie which otter device haas that ip number, or you can look through the fingscan device lists you should find the same IP number with another device.


Karl

i remember from some time ago that the apple wifi access devices can have multiple IP numbers on a single MAC number and can do things to route traffic when a another wap goes offline

Karl

Thanks, Karl.
I do see several discussions on Apple Forums complaining about Airport Expresses with multiple IP address,
so that does seem to be the problem, and it even explains the "double" IP address complaints on my Mac. From the fing.log:

Code: Select all

...
2020/08/27 12:51:58;changed;192.168.0.65;;;F0:D1:A9:0A:F9:77;
2020/08/27 12:51:58;changed;192.168.0.65;;;B8:F6:B1:19:49:45;Apple
2020/08/27 12:52:00;changed;192.168.0.65;;;F0:D1:A9:0A:F9:77;
2020/08/27 12:52:00;changed;192.168.0.65;;;B8:F6:B1:19:49:45;Apple
2020/08/27 12:52:03;changed;192.168.0.65;;;F0:D1:A9:0A:F9:77;
2020/08/27 12:52:38;changed;192.168.0.65;;;B8:F6:B1:19:49:45;Apple
...

where F0:D1:A9:0A:F9:77 is the Airport, and B8:F6:B1:19:49:45 is my Mac,
even thought I have the airport in Bridge mode, with a static IP, and the same IP statically configured to the same MAC on the DHCP server (Arris cable modem/router/WAP).

I have the latest firmware on the Airport, and of course it's discontinued, so there's no hope of a fix.

Sigh. Do I live with it or trash it and get a new cheap WAP? Hmmmmm.

-- John

PS I hope Laura stays well East of Dallas! Stay safe.

you can stop the logging in fingscan device edit,
it will still change, but no log entry or emails

Karl