On 12/3/2014 12:47 PM, g wrote: > wireshark text file loaded at; > > http://pastebin.com/rCU0CC10 some device on your network has the MAC address 00:0f:fe:8f:8f:23 which Wireshark is calling PartedMagic for unknown reasons. That MAC prefix apparently belongs to an obscure Chinese computer maker, G-Pro Computers. http://macaddress.webwat.ch/vendor/G-PRO_COMPUTER the weblink given for G-Pro is wrong. some random google searching suggests that they may be an OEM for Lite-On, do you have any network devices from Lite-On (I'm only familiar with Lite-On as a CD/DVD burner/reader brand). oh. the ARP packet suggests that MAC address is 192.168.1.144 1. No. Time Source Destination Protocol Length Info 2. 3 1.137831000 PartedMagic Broadcast ARP 42 Who has 192.168.1.254? Tell 192.168.1.144 3. 4. Frame 3: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) on interface 0 5. Ethernet II, Src: PartedMagic (00:0f:fe:8f:8f:23), Dst: Broadcast (ff:ff:ff:ff:ff:ff) 6. Address Resolution Protocol (request) -- john r pierce 37N 122W somewhere on the middle of the left coast