OUI Database App (MAC addresses)

Is there an application available that can look up OUI (Organizational Unique Identifier) that can be used ‘offline’.

I need to be able to look-up OUI’s while doing packet sniffing and I do not always have an internet connection available. Command line or GUI is fine.

If there is no such application is there a good flat text file that I could write my own script with ?

Thanks!

I seem to remember wireshark came with its set of OUI tables, maybe you can grab those from the source. Or use wireshark.

On Fri, 15 Aug 2008 15:06:03 GMT
dcabanaw <dcabanaw@no-mx.forums.opensuse.org> wrote:

>
> Is there an application available that can look up OUI (Organizational
> Unique Identifier) that can be used ‘offline’.
>
> I need to be able to look-up OUI’s while doing packet sniffing and I do
> not always have an internet connection available. Command line or GUI
> is fine.
>
> If there is no such application is there a good flat text file that I
> could write my own script with ?
>
> Thanks!
>
>

If you install ‘arpwatch-ethercodes’, you will find a very useful text file
in /usr/share/arpwatch/ethercodes.dat which contains a current OUI dataset.

I use it myself quite often. There is also a script which can be used to
obtain a new list from the IEEE OUI Registration Authority, install
‘arpwatch-ethercodes-build’ for that.

To use it, drop any leading zeros, and grep for that…

So my card (00:11:09) would be:

grep 0:11:9 /usr/share/arpwatch/ethercodes.dat

and returns a long list. grepping with a trailing space helps…

grep "0:11:9 " /usr/share/arpwatch/ethercodes.dat

just returns a single entry:

0:11:9 Micro-Star International

You can download a text file with current information (last was 15 Aug 2008)
from the IEEE OUI Registration Authority:

http://standards.ieee.org/regauth/oui/oui.txt

Although it’s multi-line, and would need to be parsed slightly to allow for
easier grepping.

Hope this helps

Loni


L R Nix
lornix@lornix.com