Home page logo

nmap-dev logo Nmap Development mailing list archives

[minor bug?] MAC Address vendor list is limited only to OUI
From: Franco Lanza <franco () unixmedia it>
Date: Thu, 23 Jun 2011 16:23:00 +0200

i've noticed that the MAC Address vendor prefixes "resolved" by nmap
are based on a local database of prefixes parsed from the OUI list 
on the ieee web site.

This list is only for OUI, but a lot of minor company use a IAB address block.

IAB are Ieee self-assigned OUI blocks, where only the last 12bit are sub-assigned.

For example, the block 00:50:C2:E0:D0:00 - 00:50:C2:E0:DF:FF is an IAB
assigned to my own company, "Unixmedia S.r.l.", but on nmap
it show "Ieee Registration Authority" as the first 3 bytes
are registered as this OUI.

In my opinion nmap should also check for IAB when the OUI is Ieee.

IAB database is located here: http://standards.ieee.org/develop/regauth/iab/iab.txt

Franco Lanza
UnixMedia - Media Convergence Solutions
email: info () unixmedia it
Fax: +39 02 41470505
Ufficio: +39 02 41470504
Cell: +39 339 8125940
Skype: Unixmedia 
VoIP: SIP://unixmedia () voip unixmedia net
Milano - Italy

NO TCPA: http://www.no1984.org
you can download my public key at:
http://danex.nexlab.it/nextime.asc || Key Servers
Key ID = D6132D50
Key fingerprint = 66ED 5211 9D59 DA53 1DF7  4189 DFED F580 D613 2D50
 | dc

Attachment: signature.asc

Sent through the nmap-dev mailing list
Archived at http://seclists.org/nmap-dev/

  By Date           By Thread  

Current thread:
  • [minor bug?] MAC Address vendor list is limited only to OUI Franco Lanza (Jun 23)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]