Situation:
A subnet with > 4000 machines. One of them is the "default
gateway".

Without DHCP, is there any way of determining the address of
the default gateway ?
The network is wireless and I have kismet, airodump, nmap etc
etc
TIA