NAME

       mac-vendor - Ethernet vendor file for arp-scan

SYNOPSIS

       mac-vendor.txt

DESCRIPTION

       The  mac-vendor.txt contains Ethernet MAC to vendor string mappings for arp-scan.  It is used in addition
       to the IEEE OUI listings in ieee-oui.txt.  It is for MAC-vendor mappings that are not covered by the IEEE
       manufacturer listings.

       Each line in the mac-vendor.txt file contains a MAC-vendor mapping in the form:

       <MAC-Prefix><TAB><Vendor>

       Where <MAC-Prefix> is the prefix of the MAC address in hex, and <Vendor> is the name of the vendor.   The
       prefix  can be of any length from two hex digits (one octet) to twelve hex digits (six octets, the entire
       Ethernet hardware address).

       Alphabetic hex characters [A-F] may use either upper or lower case, and seperator symbols  such  as  ":",
       "-" and "." are ignored. This permits the use of standard format MAC addresses in this file.

       For example:
       01:23:45      matches 01:23:45:xx:xx:xx, where xx represents any value;
       01:23:45:6    matches 01:23:45:6x:xx:xx; and
       01:23:45:67   matches 01:23:45:67:xx:xx.

       Do  not  include entries from the IEEE OUI listings, as these are already in the file ieee-oui.txt, which
       is automatically used by arp-scan.  See get-oui(1) for details of how to update the OUI listings.

       The order of entries in the file is not important.

       Blank lines and lines beginning with "#" are ignored.  arp-scan will attempt  to  match  larger  prefixes
       before trying to match smaller ones, and will stop at the first match.

FILES

       /usr/local/share/arp-scan/mac-vendor.txt

EXAMPLE

       # From nmap Debian bug report #369681 dated 31 May 2006
       52:54:00        QEMU
       b0:c4:20        Bochs

       # From RFC 2338: 00-00-5E-00-01-{VRID}
       00:00:5e:00:01  VRRP (last octet is VRID)

       # Microsoft WLBS (Windows NT Load Balancing Service)
       # http://www.microsoft.com/technet/prodtechnol/acs/reskit/acrkappb.mspx
       02:bf   Microsoft WLBS (last four octets are IP address)

       # Cisco HSRP (Hot Standby Routing Protocol)
       # 00-00-0c-07-ac-XX, where XX is the HSRP group number (0 to 255)
       00:00:0c:07:ac  HSRP (last octet is group number)

SEE ALSO

       arp-scan(1)

       get-oui(1)

       arp-fingerprint(1)

                                                October 28, 2022                                   MAC-VENDOR(5)