MAC addresses are used at a lower level than IP, and refer to each transition or leg from end to end, so they really do not help in this problem.
Detecting attached devices is a rather difficult task, and there are special solutions for this. They tend to consider a few things to try to determine if other devices are using a mobile connection, even if the devices are spoofing or manipulating headers, etc.
Examples of solutions to be considered in the solution:
- number of simultaneous sessions
- Custom HTTP Agent Headers
- device type
- device screen size
- TCP timestamp
- TCP source port
- TCP Code Sequence
- Application Based Correlation for TCP Streams
- Node-paired correlation with TCP streams
. ( ):