NAME

       mac-vendor - Ethernet vendor file for arp-scan

SYNOPSIS

       mac-vendor.txt

DESCRIPTION

       The  mac-vendor.txt  contains  Ethernet MAC to vendor string mappings for arp-scan.  It is
       used in addition to the IEEE OUI listings in ieee-oui.txt.  It is for MAC-vendor  mappings
       that are not covered by the IEEE manufacturer listings.

       Each line in the mac-vendor.txt file contains a MAC-vendor mapping in the form:

       <MAC-Prefix><TAB><Vendor>

       Where  <MAC-Prefix>  is  the prefix of the MAC address in hex, and <Vendor> is the name of
       the vendor.  The prefix can be of any length from two hex digits (one octet) to twelve hex
       digits (six octets, the entire Ethernet hardware address).

       Alphabetic  hex characters [A-F] may use either upper or lower case, and seperator symbols
       such as ":", "-" and "." are  ignored.  This  permits  the  use  of  standard  format  MAC
       addresses in this file.

       For example:

       01:23:45      matches 01:23:45:xx:xx:xx, where xx represents any value;
       01:23:45:6    matches 01:23:45:6x:xx:xx; and
       01:23:45:67   matches 01:23:45:67:xx:xx.

       Do  not include entries from the IEEE OUI listings, as these are already in the file ieee-
       oui.txt, which is automatically used by arp-scan.  See get-oui(1) for details  of  how  to
       update the OUI listings.

       The order of entries in the file is not important.

       Blank  lines  and  lines  beginning  with "#" are ignored.  arp-scan will attempt to match
       larger prefixes before trying to match smaller ones, and will stop at the first match.

FILES

       /usr/local/share/arp-scan/mac-vendor.txt

EXAMPLE

       # From nmap Debian bug report #369681 dated 31 May 2006
       52:54:00        QEMU
       b0:c4:20        Bochs

       # From RFC 2338: 00-00-5E-00-01-{VRID}
       00:00:5e:00:01  VRRP (last octet is VRID)

       # Microsoft WLBS (Windows NT Load Balancing Service)
       # http://www.microsoft.com/technet/prodtechnol/acs/reskit/acrkappb.mspx
       02:bf   Microsoft WLBS (last four octets are IP address)

       # Cisco HSRP (Hot Standby Routing Protocol)
       # 00-00-0c-07-ac-XX, where XX is the HSRP group number (0 to 255)
       00:00:0c:07:ac  HSRP (last octet is group number)

SEE ALSO

       arp-scan(1)

       get-oui(1)

       arp-fingerprint(1)

                                         October 28, 2022                           MAC-VENDOR(5)