1GET-IAB(1) General Commands Manual GET-IAB(1)
2
3
4
6 get-iab - Fetch the arp-scan IAB file from the IEEE website
7
9 get-iab [options]
10
12 get-iab fetches the Ethernet IAB file from the IEEE website, and saves
13 it in the format used by arp-scan.
14
15 The IAB file contains all of the IABs (Individual Address Blocks) that
16 have been registered with IEEE. Each IAB entry in the file specifies
17 the first 36-bits of the 48-bit Ethernet hardware address, leaving the
18 remaining 12-bits for use by the registering organisation. For example
19 the IAB entry "0050C2003", registered to Microsoft, applies to any Eth‐
20 ernet hardware address from 00:50:c2:00:30:00 to 00:50:c2:00:3f:ff
21 inclusive. Each IAB assignment represents a total of 2^12 (4,096) Eth‐
22 ernet addresses.
23
24 Major Ethernet hardware vendors typically use an OUI registration
25 rather than an IAB registration. See get-oui(1) for details.
26
27 This script can be used to update the arp-scan IAB file from the latest
28 data on the IEEE website. It is relatively rare to see Ethernet
29 addresses from IAB registrations, so the IAB file is not as important
30 as the OUI file.
31
32 The IAB data is fetched from the URL http://stan‐
33 dards.ieee.org/regauth/oui/iab.txt and the output file is saved to the
34 file ieee-iab.txt in the current directory. The URL to fetch the data
35 from can be changed with the -u option, and the output file name can be
36 changed with the -f option.
37
38 The ieee-iab.txt file that is produced by this script is used by arp-
39 scan to determine the Ethernet card vendor from its hardware address.
40
41 The directory that arp-scan will look for the ieee-iab.txt file depends
42 on the options used when it was built. If it was built using the
43 default options, then it will look in /usr/local/share/arp-scan.
44
46 -h Display a brief usage message and exit.
47
48 -f <fn>
49 Write the output to the specified file instead of the default
50 ieee-iab.txt.
51
52 -u <URL>
53 Use the specified URL to fetch the raw IAB data from instead of
54 the default http://standards.ieee.org/regauth/oui/iab.txt
55
56 -v Display verbose progress messages.
57
59 ieee-iab.txt
60 The default output file.
61
63 $ get-iab -v
64 Renaming ieee-iab.txt to ieee-iab.txt.bak
65 Fetching IAB data from http://standards.ieee.org/regauth/oui/iab.txt
66 Fetched 230786 bytes
67 Opening output file ieee-iab.txt
68 1535 IAB entries written to file ieee-iab.txt
69
71 get-iab is implemented in Perl, so you need to have the Perl inter‐
72 preter installed on your system to use it.
73
74 get-iab uses the LWP::Simple Perl module to fetch the data from the
75 IEEE website. You must have this module installed on your system for it
76 to work. This module is available on most distributions, often called
77 libwww-perl. It is also available in source form from CPAN.
78
79 You can use a proxy server by defining the http_proxy environment vari‐
80 able.
81
83 Roy Hills <Roy.Hills@nta-monitor.com>
84
86 arp-scan(1)
87
88 get-oui(1)
89
90 arp-fingerprint(1)
91
92 http://www.nta-monitor.com/wiki/ The arp-scan wiki page.
93
94
95
96 March 30, 2007 GET-IAB(1)