This is an old revision of the document!
I was curious to see how much I could detect with an off the shelf setup. Here are the numbers so far:
Raw size: 2,077,031,816 bytes (2.0Gb) (14,991,993 lines of tcpdump data)
2019-09-11 22:21 to 2019-09-19 06:13 (approx 7 days, 7 hours and 52 minutes) 10,554 minutes
Unique MAC addresses seen: 68,298
MAC addresses seen only once at all | 25,318 |
MAC addresses seen 2-9 times | 37,436 |
MAC addresses seen 10-99 times | 4,917 |
MAC addresses seen 100-999 times | 399 |
MAC addresses seen 1,000-9,999 times | 119 |
MAC addresses seen 10,000-99,999 times | 74 |
MAC addresses seen 100,000-999,999 times | 42 |
MAC addresses seen 1million+ times | 4 |
If a MAC address is observed at least once in any single minute long period (they could be consecutive minutes), how many times does that happen?
MAC addresses seen 1 distinct minute/time | 61,666 |
MAC addresses seen on 2 distinct minutes | 2,859 |
MAC addresses seen on 3 distinct minutes | 1,030 |
MAC addresses seen on 4 distinct minutes | 558 |
MAC addresses seen on 5 distinct minutes | 336 |
MAC addresses seen on 6 distinct minutes | 217 |
MAC addresses seen on 7 distinct minutes | 151 |
MAC addresses seen on 8 distinct minutes | 137 |
MAC addresses seen on 9 distinct minutes | 97 |
MAC addresses seen on 10 distinct minutes | 89 |
MAC addresses seen on 11 distinct minutes | 86 |
MAC addresses seen on 12 distinct minutes | 79 |
MAC addresses seen on 13 distinct minutes | 62 |
MAC addresses seen on 14 distinct minutes | 40 |
MAC addresses seen on 15 distinct minutes | 37 |
MAC addresses seen on 16 distinct minutes | 38 |
MAC addresses seen on 17 distinct minutes | 24 |
MAC addresses seen on 18 distinct minutes | 36 |
MAC addresses seen on 19 distinct minutes | 27 |
MAC addresses seen on 20 distinct minutes | 19 |
MAC addresses seen on 21 distinct minutes | 18 |
MAC addresses seen on 22 distinct minutes | 19 |
MAC addresses seen on 23 distinct minutes | 16 |
MAC addresses seen on 24 distinct minutes | 9 |
MAC addresses seen on 25 distinct minutes | 17 |
MAC addresses seen on 26 distinct minutes | 15 |
MAC addresses seen on 27 distinct minutes | 7 |
MAC addresses seen in 28 distinct minutes | 8 |
MAC addresses seen in 29 distinct minutes | 6 |
MAC addresses seen in 30 distinct minutes | 9 |
MAC addresses seen in 31 distinct minutes | 10 |
MAC addresses seen in 32 distinct minutes | 7 |
MAC addresses seen in 33 distinct minutes | 6 |
MAC addresses seen in 34 distinct minutes | 6 |
MAC addresses seen in 35 distinct minutes | 10 |
MAC addresses seen in 36 distinct minutes | 11 |
MAC addresses seen in 37 distinct minutes | 12 |
MAC addresses seen in 38 distinct minutes | 13 |
MAC addresses seen in 39 distinct minutes | 5 |
MAC addresses seen in 40 distinct minutes | 7 |
MAC addresses seen in 41 distinct minutes | 4 |
MAC addresses seen in 42 distinct minutes | 5 |
MAC addresses seen in 43 distinct minutes | 7 |
MAC addresses seen in 44 distinct minutes | 7 |
MAC addresses seen in 45 distinct minutes | 7 |
MAC addresses seen in 46 distinct minutes | 3 |
MAC addresses seen in 47 distinct minutes | 7 |
MAC addresses seen in 48 distinct minutes | 4 |
MAC addresses seen in 49 distinct minutes | 3 |
MAC addresses seen in 50 distinct minutes | 4 |
MAC addresses seen in 51 distinct minutes | 1 |
MAC addresses seen in 52 distinct minutes | 1 |
MAC addresses seen in 53 distinct minutes | 6 |
MAC addresses seen in 54 distinct minutes | 1 |
MAC addresses seen in 55 distinct minutes | 2 |
MAC addresses seen in 56 distinct minutes | 5 |
MAC addresses seen in 57 distinct minutes | 6 |
MAC addresses seen in 58 distinct minutes | 3 |
MAC addresses seen in 59 distinct minutes | 2 |
MAC addresses seen in 60 distinct minutes | 2 |
MAC addresses seen in 61 distinct minutes | 4 |
MAC addresses seen in 62 distinct minutes | 5 |
MAC addresses seen in 63 distinct minutes | 3 |
MAC addresses seen in 64 distinct minutes | 2 |
MAC addresses seen in 65 distinct minutes | 6 |
MAC addresses seen in 66 distinct minutes | 3 |
MAC addresses seen in 67 distinct minutes | 3 |
MAC addresses seen in 68 distinct minutes | 1 |
MAC addresses seen in 69 distinct minutes | 6 |
MAC addresses seen in 70 distinct minutes | 2 |
MAC addresses seen in 71 distinct minutes | 1 |
MAC addresses seen in 72 distinct minutes | 1 |
MAC addresses seen in 73 distinct minutes | 1 |
MAC addresses seen in 74 distinct minutes | 1 |
MAC addresses seen in 75 distinct minutes | 4 |
MAC addresses seen in 77 distinct minutes | 1 |
MAC addresses seen in 78 distinct minutes | 1 |
MAC addresses seen in 79 distinct minutes | 1 |
MAC addresses seen in 80 distinct minutes | 1 |
MAC addresses seen in 82 distinct minutes | 1 |
MAC addresses seen in 83 distinct minutes | 2 |
MAC addresses seen in 84 distinct minutes | 1 |
MAC addresses seen in 85 distinct minutes | 2 |
MAC addresses seen in 86 distinct minutes | 5 |
MAC addresses seen in 87 distinct minutes | 2 |
MAC addresses seen in 89 distinct minutes | 2 |
MAC addresses seen in 90 distinct minutes | 1 |
MAC addresses seen in 92 distinct minutes | 4 |
MAC addresses seen in 93 distinct minutes | 2 |
MAC addresses seen in 94 distinct minutes | 4 |
MAC addresses seen in 95 distinct minutes | 2 |
MAC addresses seen in 96 distinct minutes | 1 |
MAC addresses seen in 97 distinct minutes | 3 |
MAC addresses seen in 99 distinct minutes | 2 |
MAC addresses seen in 101 distinct minutes | 1 |
MAC addresses seen in 103 distinct minutes | 1 |
MAC addresses seen in 104 distinct minutes | 1 |
MAC addresses seen in 106 distinct minutes | 1 |
MAC addresses seen in 108 distinct minutes | 1 |
MAC addresses seen in 109 distinct minutes | 2 |
MAC addresses seen in 110 distinct minutes | 1 |
MAC addresses seen in 111 distinct minutes | 2 |
MAC addresses seen in 112 distinct minutes | 1 |
MAC addresses seen in 114 distinct minutes | 1 |
MAC addresses seen in 115 distinct minutes | 1 |
MAC addresses seen in 117 distinct minutes | 2 |
MAC addresses seen in 118 distinct minutes | 3 |
MAC addresses seen in 119 distinct minutes | 3 |
MAC addresses seen in 120 distinct minutes | 1 |
MAC addresses seen in 121 distinct minutes | 1 |
MAC addresses seen in 123 distinct minutes | 3 |
MAC addresses seen in 124 distinct minutes | 1 |
MAC addresses seen in 128 distinct minutes | 2 |
MAC addresses seen in 129 distinct minutes | 1 |
MAC addresses seen in 132 distinct minutes | 2 |
MAC addresses seen in 133 distinct minutes | 1 |
MAC addresses seen in 135 distinct minutes | 1 |
MAC addresses seen in 136 distinct minutes | 1 |
MAC addresses seen in 137 distinct minutes | 2 |
MAC addresses seen in 138 distinct minutes | 1 |
MAC addresses seen in 139 distinct minutes | 1 |
MAC addresses seen in 140 distinct minutes | 1 |
MAC addresses seen in 141 distinct minutes | 3 |
MAC addresses seen in 142 distinct minutes | 2 |
MAC addresses seen in 143 distinct minutes | 2 |
MAC addresses seen in 144 distinct minutes | 1 |
MAC addresses seen in 145 distinct minutes | 1 |
MAC addresses seen in 146 distinct minutes | 1 |
MAC addresses seen in 147 distinct minutes | 3 |
MAC addresses seen in 149 distinct minutes | 1 |
MAC addresses seen in 150 distinct minutes | 1 |
MAC addresses seen in 152 distinct minutes | 1 |
MAC addresses seen in 153 distinct minutes | 1 |
MAC addresses seen in 154 distinct minutes | 1 |
MAC addresses seen in 156 distinct minutes | 2 |
MAC addresses seen in 158 distinct minutes | 2 |
MAC addresses seen in 159 distinct minutes | 2 |
MAC addresses seen in 161 distinct minutes | 2 |
MAC addresses seen in 162 distinct minutes | 1 |
MAC addresses seen in 163 distinct minutes | 1 |
MAC addresses seen in 165 distinct minutes | 1 |
MAC addresses seen in 173 distinct minutes | 1 |
MAC addresses seen in 174 distinct minutes | 1 |
MAC addresses seen in 175 distinct minutes | 1 |
MAC addresses seen in 177 distinct minutes | 1 |
MAC addresses seen in 178 distinct minutes | 1 |
MAC addresses seen in 180 distinct minutes | 1 |
MAC addresses seen in 181 distinct minutes | 1 |
MAC addresses seen in 183 distinct minutes | 1 |
MAC addresses seen in 184 distinct minutes | 1 |
MAC addresses seen in 186 distinct minutes | 1 |
MAC addresses seen in 190 distinct minutes | 1 |
MAC addresses seen in 197 distinct minutes | 2 |
MAC addresses seen in 198 distinct minutes | 1 |
MAC addresses seen in 199 distinct minutes | 1 |
MAC addresses seen in 200 distinct minutes | 2 |
MAC addresses seen in 202 distinct minutes | 1 |
MAC addresses seen in 204 distinct minutes | 1 |
MAC addresses seen in 205 distinct minutes | 1 |
MAC addresses seen in 208 distinct minutes | 1 |
MAC addresses seen in 214 distinct minutes | 1 |
MAC addresses seen in 216 distinct minutes | 2 |
MAC addresses seen in 220 distinct minutes | 1 |
MAC addresses seen in 222 distinct minutes | 1 |
MAC addresses seen in 230 distinct minutes | 2 |
MAC addresses seen in 232 distinct minutes | 1 |
MAC addresses seen in 234 distinct minutes | 1 |
MAC addresses seen in 239 distinct minutes | 1 |
MAC addresses seen in 253 distinct minutes | 1 |
MAC addresses seen in 273 distinct minutes | 1 |
MAC addresses seen in 278 distinct minutes | 1 |
MAC addresses seen in 279 distinct minutes | 1 |
MAC addresses seen in 282 distinct minutes | 1 |
MAC addresses seen in 283 distinct minutes | 2 |
MAC addresses seen in 284 distinct minutes | 2 |
MAC addresses seen in 287 distinct minutes | 1 |
MAC addresses seen in 291 distinct minutes | 1 |
MAC addresses seen in 292 distinct minutes | 1 |
MAC addresses seen in 305 distinct minutes | 1 |
MAC addresses seen in 312 distinct minutes | 1 |
MAC addresses seen in 315 distinct minutes | 3 |
MAC addresses seen in 320 distinct minutes | 1 |
MAC addresses seen in 321 distinct minutes | 1 |
MAC addresses seen in 325 distinct minutes | 1 |
MAC addresses seen in 329 distinct minutes | 1 |
MAC addresses seen in 335 distinct minutes | 1 |
MAC addresses seen in 342 distinct minutes | 1 |
MAC addresses seen in 343 distinct minutes | 1 |
MAC addresses seen in 344 distinct minutes | 1 |
MAC addresses seen in 345 distinct minutes | 1 |
MAC addresses seen in 349 distinct minutes | 2 |
MAC addresses seen in 366 distinct minutes | 1 |
MAC addresses seen in 385 distinct minutes | 1 |
MAC addresses seen in 386 distinct minutes | 1 |
MAC addresses seen in 388 distinct minutes | 1 |
MAC addresses seen in 389 distinct minutes | 1 |
MAC addresses seen in 394 distinct minutes | 1 |
MAC addresses seen in 401 distinct minutes | 2 |
MAC addresses seen in 404 distinct minutes | 1 |
MAC addresses seen in 405 distinct minutes | 1 |
MAC addresses seen in 409 distinct minutes | 1 |
MAC addresses seen in 410 distinct minutes | 1 |
MAC addresses seen in 412 distinct minutes | 1 |
MAC addresses seen in 415 distinct minutes | 1 |
MAC addresses seen in 416 distinct minutes | 1 |
MAC addresses seen in 417 distinct minutes | 2 |
MAC addresses seen in 433 distinct minutes | 1 |
MAC addresses seen in 437 distinct minutes | 1 |
MAC addresses seen in 445 distinct minutes | 1 |
MAC addresses seen in 462 distinct minutes | 1 |
MAC addresses seen in 472 distinct minutes | 1 |
MAC addresses seen in 474 distinct minutes | 1 |
MAC addresses seen in 492 distinct minutes | 1 |
MAC addresses seen in 504 distinct minutes | 1 |
MAC addresses seen in 512 distinct minutes | 1 |
MAC addresses seen in 515 distinct minutes | 1 |
MAC addresses seen in 516 distinct minutes | 1 |
MAC addresses seen in 519 distinct minutes | 1 |
MAC addresses seen in 524 distinct minutes | 1 |
MAC addresses seen in 529 distinct minutes | 1 |
MAC addresses seen in 538 distinct minutes | 1 |
MAC addresses seen in 544 distinct minutes | 1 |
MAC addresses seen in 552 distinct minutes | 1 |
MAC addresses seen in 557 distinct minutes | 2 |
MAC addresses seen in 562 distinct minutes | 1 |
MAC addresses seen in 573 distinct minutes | 1 |
MAC addresses seen in 574 distinct minutes | 1 |
MAC addresses seen in 575 distinct minutes | 1 |
MAC addresses seen in 581 distinct minutes | 1 |
MAC addresses seen in 582 distinct minutes | 1 |
MAC addresses seen in 597 distinct minutes | 1 |
MAC addresses seen in 612 distinct minutes | 1 |
MAC addresses seen in 620 distinct minutes | 1 |
MAC addresses seen in 623 distinct minutes | 1 |
MAC addresses seen in 636 distinct minutes | 1 |
MAC addresses seen in 637 distinct minutes | 1 |
MAC addresses seen in 661 distinct minutes | 1 |
MAC addresses seen in 687 distinct minutes | 1 |
MAC addresses seen in 691 distinct minutes | 1 |
MAC addresses seen in 693 distinct minutes | 1 |
MAC addresses seen in 714 distinct minutes | 1 |
MAC addresses seen in 748 distinct minutes | 1 |
MAC addresses seen in 782 distinct minutes | 1 |
MAC addresses seen in 795 distinct minutes | 1 |
MAC addresses seen in 802 distinct minutes | 1 |
MAC addresses seen in 814 distinct minutes | 1 |
MAC addresses seen in 895 distinct minutes | 1 |
MAC addresses seen in 906 distinct minutes | 1 |
MAC addresses seen in 919 distinct minutes | 1 |
MAC addresses seen in 957 distinct minutes | 1 |
MAC addresses seen in 966 distinct minutes | 1 |
MAC addresses seen in 982 distinct minutes | 1 |
MAC addresses seen in 999+ distinct minutes (999 minutes is just under 10% of the full scanning time) | 146 |
MAC addresses seen in 5,250+ distinct minutes (5,250 minutes is approximately 50% of the full scanning time) | 48 |
MAC addresses seen in 9,500+ distinct minutes (9,500 minutes is approximately 90% of the full scanning time) | 31 |
This table continues in this fashion for another 174 lines, all 1 mac address seen 999+ times). For completeness, the full list follows | 1 |
1006, 1014, 1021, 1023, 1099, 1103, 1110, 1118, 1142, 1148, 1220, 1264, 1303, 1311, 1317, 1354, 1387, 1389, 1450, 1464, 1473, 1478, 1498, 1518, 1560, 1568, 1600, 1600, 1619, 1660, 1664, 1686, 1707, 1730, 1754, 1762, 1780, 1804, 1843, 1864, 1897, 1897, 1908, 1924, 1946, 1973, 1989, 2086, 2096, 2157, 2176, 2204, 2277, 2277, 2277, 2320, 2406, 2412, 2493, 2501, 2577, 2648, 2725, 2728, 2748, 2955, 3043, 3057, 3087, 3093, 3144, 3180, 3230, 3360, 3374, 3418, 3534, 3575, 3680, 3717, 3818, 3900, 3905, 3911, 3945, 4038, 4063, 4106, 4234, 4364, 4388, 4421, 4498, 4508, 4574, 4596, 4617, 5239, 5259, 5892, 5980, 6141, 6145, 6430, 6675, 8346, 8658, 8797, 8812, 8888, 8942, 8953, 9097, 9099, 9231, 9352, 9524, 9569, 9585, 9788, 9928, 10099, 10107, 10202, 10246, 10282, 10288, 10363, 10389, 10441, 10447, 10449, 10479, 10493, 10502, 10523, 10523, 10523, 10527, 10527, 10529, 10529, 10537, 10537, 10541, 10554
i.e. I saw a single unique MAC address in 1006 distinct 1 minute periods, and 1014 periods all the way up to obvious nearby equipment (possibly on my network) 10554 minutes in a week (out of a possible 10,554 minutes).
Roughly speaking I saw approximately 30 devices 90% of the time the scan was running (these must be equipment in my flat or in the neighbouring properties).