1MAC-VENDOR(5)                 File Formats Manual                MAC-VENDOR(5)
2
3
4

NAME

6       mac-vendor - Ethernet vendor file for arp-scan
7

SYNOPSIS

9       mac-vendor.txt
10

DESCRIPTION

12       The  mac-vendor.txt contains Ethernet MAC to vendor string mappings for
13       arp-scan.  It is used in addition to the IEEE OUI and IAB  listings  in
14       ieee-oui.txt  and ieee-iab.txt.  It is for MAC-vendor mappings that are
15       not covered by the IEEE manufacturer listings.
16
17       Each line in the mac-vendor.txt file contains a MAC-vendor  mapping  in
18       the form:
19
20       <MAC-Prefix><TAB><Vendor>
21
22       Where  <MAC-Prefix>  is the prefix of the MAC address in hex, and <Ven‐
23       dor> is the name of the vendor.  The prefix can be of any  length  from
24       two hex digits (one octet) to twelve hex digits (six octets, the entire
25       Ethernet hardware address).  The alphabetic hex characters  [A-F]  must
26       be entered in upper case.
27
28       For example:
29       012345    would match 01:23:45:xx:xx:xx, where xx represents any value;
30       0123456   would match 01:23:45:6x:xx:xx; and
31       01234567  would match 01:23:45:67:xx:xx.
32
33       Blank lines and lines beginning with "#" are ignored.
34
35       The  order  of  entries  in  the  file is not important.  arp-scan will
36       attempt to match larger prefixes before trying to match  smaller  ones,
37       and will stop at the first match.
38

FILES

40       /usr/local/share/arp-scan/mac-vendor.txt
41

EXAMPLE

43       # From nmap Debian bug report #369681 dated 31 May 2006
44       525400  QEMU
45       B0C420  Bochs
46
47       # From RFC 2338: 00-00-5E-00-01-{VRID}
48       00005E0001      VRRP (last octet is VRID)
49
50       # Microsoft WLBS (Windows NT Load Balancing Service)
51       # http://www.microsoft.com/technet/prodtechnol/acs/reskit/acrkappb.mspx
52       02BF    Microsoft WLBS (last four octets are IP address)
53

AUTHOR

55       Roy Hills <Roy.Hills@nta-monitor.com>
56

SEE ALSO

58       arp-scan(1)
59
60       get-oui(1)
61
62       get-iab(1)
63
64       arp-fingerprint(1)
65
66       http://www.nta-monitor.com/wiki/ The arp-scan wiki page.
67
68
69
70                                March 30, 2007                   MAC-VENDOR(5)
Impressum