Re: [minor bug?] MAC Address vendor list is limited only to OUI

[David Fifield <david () bamsoftware com>]

On Thu, Jun 23, 2011 at 04:23:00PM +0200, Franco Lanza wrote:
> Hello,
> i've noticed that the MAC Address vendor prefixes "resolved" by nmap
> are based on a local database of prefixes parsed from the OUI list 
> on the ieee web site.
>
> This list is only for OUI, but a lot of minor company use a IAB address block.
>
> IAB are Ieee self-assigned OUI blocks, where only the last 12bit are sub-assigned.
>
> For example, the block 00:50:C2:E0:D0:00 - 00:50:C2:E0:DF:FF is an IAB
> assigned to my own company, "Unixmedia S.r.l.", but on nmap
> it show "Ieee Registration Authority" as the first 3 bytes
> are registered as this OUI.
>
> In my opinion nmap should also check for IAB when the OUI is Ieee.

This looks like a good idea. I think we would accept such a new feature
if somewas was to write a patch.

David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/