Level 1

21 points

wifi LAN issue

I recently downloaded a free app called LanScan from Apple's App Store. I've run it twice and both times it shows (as it's supposed to) all the mac addresses of all the devices on my wifi network (via an older airport extreme). However, there is one device listed I do not recognize that has appeared once with the same mac address as my Apple TV and then this morning it had the same address as my AirPort !? The device is labled: Apple, Inc. App... GoPro! ... (the dots are actually asterisks but along the text baseline not superscripted like normal asterisks). I did not install a GoPro app. Why and how is this suddenly appearing on my network? Thanks very much for your help.

MacBook Pro, macOS High Sierra (10.13.2), 2.4 GHz core 2 duo; 8GB; 320GB HD

Posted on Jan 22, 2018 6:50 AM

34 replies

estabroo Author

Level 1

21 points

Jan 22, 2018 1:01 PM in response to Tesserax

just ran LanScan again and now the App*** Go Pro! *** reappeared with the same mac address as the airport but it's labeled as Apple-TV-2.home in the DNS Name column in the LanScan list. The actual (true) Apple TV mac address is blank in the Hostname, DNS Name and mDNS Name columns in LanScan. The device with the gopro label has not appeared in any of the Netstat lists.

estabroo Author

Level 1

21 points

Jan 22, 2018 1:23 PM in response to Tesserax

Tesserax - that Terminal procedure cleared the list of devices and now Netstat shows only the modem in the upper list and only my computer's mac address in the Internet6: list at the bottom of the Netstat window

estabroo Author

Level 1

21 points

Jan 22, 2018 1:38 PM in response to estabroo

... 1.2 and ... 1.3 were listed with the same mac address - also I changed the hostname from my name's computer and it suddenly changed to the weird Gopro text but now with est*** Go Pro! *** in the Hostname column (and Fre*** Go Pro! *** in the DNS and mDNS columns)

Tesserax

Level 10

159,482 points

Jan 22, 2018 1:48 PM in response to estabroo

Not sure if this is an issue with using the free version of LanScan as I don't seem to be able to repeat this issue with LanScan Pro. At this point, I'm not sure which protocols LanScan uses to "find" network devices. Most likely it is using a number of them. When I get a chance I will do a data capture of my LanScan when it scans my network. It may give us some clues. However, there must still be something that this free version is doing to cause this.

estabroo Author

Level 1

21 points

Jan 22, 2018 8:05 PM in response to Tesserax

What's your recommendation? I'm hearing that it's likely that the LanScan app is apparently what's causing the "Apple, Inc. App... GoPro! ..." to appear in the Hostname, DNS, mDNS columns and lists multiple devices with the same mac address. This doesn't appear in the NetScan list or the ISP's admin app's list or map view. If I just uninstall LanScan and ignore this issue am I disregarding something that needs to be resolved to assure my wifi network is secure? Maybe doing a reset on the airport and apple tv? Thanks again for your help with this.

estabroo Author

Level 1

21 points

Jan 23, 2018 9:05 AM in response to Tesserax

Today I changed name and pw for airport and then reset and reconnected apple tv - then ran netstat again and now see that the airport (home) and apple tv (home) show the same mac address in the netstat list. problem?

also - removed the lanscan app (but not sure if a more thorough uninstall procedure is needed to delete any prefs, receipts, etc?)

estabroo Author

Level 1

21 points

Jan 23, 2018 1:43 PM in response to Tesserax

a bit reluctant to publicly post the entire report... wasn't sure which problem check to use. Thanks again for all your help.

(note: the mini's wifi is not used - only the airport which runs off a dsl modem)

EtreCheck version: 3.4.6 (460)

Report generated 2018-01-23 16:00:36

Download EtreCheck from https://etrecheck.com

Runtime: 3:09

Performance: Good

Click the [Lookup] links for more information from Apple Support Communities.

Click the [Details] links for more information about that line.

Problem: No problem - just checking

Hardware Information:ⓘ

Mac mini (Late 2012)

[Technical Specifications] - [User Guide] - [Warranty & Service]

Mac mini - model: Macmini6,2

1 2.3 GHz Intel Core i7 (i7-3615QM) CPU: 4-core

16 GB RAM Upgradeable - [Instructions]

BANK 0/DIMM0

8 GB DDR3 1600 MHz ok

BANK 1/DIMM0

8 GB DDR3 1600 MHz ok

Handoff/Airdrop2: supported

Wireless: en1: Unknown

Tesserax

Level 10

159,482 points

Jan 23, 2018 2:30 PM in response to estabroo

There is no personal data provided in these reports, but you are not required to post anything.

Any issues detected would be highlighted in red. Otherwise, the areas that you would want to look at are under the following categories:

Clean up
Kernel Extensions
System Launch Agents
System Launch Daemons
Launch Agents
Launch Daemons
User Launch Agents
User Login Items
Internet Plug-ins
Diagnostics Events

The two items that are bolded will, most likely, be the area where LanScan could have installed some of its components. But again, I don't expect that you would find any.

Tesserax

Level 10

159,482 points

Jan 24, 2018 12:27 PM in response to estabroo

As I suspected, there are no remaining traces of LanScan.

A couple of suggestions, based on the additional report information that you have provided:

Remove Qmaster from your user profile's startup items list. System Preferences > Users & Groups > select your user profile > Click on the Login Items tab > Select Qmaster, and then, click on the "-" button to delete it.
Uninstall Intego Netbarrier. Macs cannot get viruses. You don't need to run an AV program, especially in background ... but, it's your call.

estabroo Author

Level 1

21 points

Jan 24, 2018 1:02 PM in response to Tesserax

I removed the airport base station startup item this morning... I'm going to do a full reset, etc.

There is no Qmaster startup item but I've been seeing this for years - I think it goes bact to Apple Motion video editing (associated with Final Cut Pro). System Events? Here's what my start up item list looks like now:

estabroo Author

Level 1

21 points

Jan 24, 2018 2:01 PM in response to Tesserax

updated flash player after this etrecheck - newest one installed now...

as I mentioned before I did a factory reset on my airport and started fresh - all new - but I just ran netstat and still see apple tv and airport base station both with the same mac address (?!) - I remember you originally saying 2 devices can't have the same mac address so I'm still baffled (I also unplugged the apple tv before running netstat - so this means my newly configured airport (base station) is also identified as apple tv home

base-station-f_ _ _ _

en0 _ _ _

apple-tv.home

en0 _ _ _

in the next column to the right the mac addresses are the same for both of these listed items

there must be a logical explanation - there always is ::))

thanks again Tesserax

also - I found the qmaster folder where you said and trashed it

estabroo Author

Level 1

21 points

Jan 25, 2018 10:16 AM in response to Tesserax

Update: left the Apple TV plugged in overnight and this morning after booting up the mac and airport I checked the addresses with the airport utility which both showed the correct -separate- mac addresses in the wireless clients window ... but then decided to double check with Netstat and unfortunately the apple tv and the airport were showing the same mac address again. The airport utility still showed the printer and the apple tv listed with their correct mac addresses and separate logical IP addresses but Netstat listed the apple tv and the airport with the airport's mac address again. When I checked again with the airport utility I noticed that the IP address for the apple tv was now blank in the wireless clients window. It's very clear that after a few minutes of LAN connection time the apple tv switches to the airport's identity. Could this be somehow explained as not a problem? or could there be some kind of bug or malware at work here? Very puzzling and frustrating.

estabroo Author

Level 1

21 points

Jan 26, 2018 6:09 AM in response to Tesserax

Yes and again thanks for all your help... I guess the only remaining 'mystery' for me is where the original phantom App***GoPro!*** labels came from. One silver lining is I needed to reset, rename and change pws for everything anyway.

Tesserax

Level 10

159,482 points

Jan 26, 2018 9:54 AM in response to estabroo

A mentioned earlier, the MAC address is a unique numeric identifier. This address is assigned by the manufacturer, for Ethernet and Wi-Fi, as applicable.

My guess is that LanScan inspects the MAC address and determines the manufacturer.

Ref: MAC address - Wikipedia

estabroo Author

Level 1

21 points

Jan 22, 2018 12:33 PM in response to Tesserax

I do not have a GoPro camera and yes - this morning the airport extreme and the "App... GoPro! ..." were shown by LanScan at the same mac address. In the LanScan list nothing is greyed out.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

wifi LAN issue