View source for Arp-scan mac vendor file

Below is the latest MAC/Vendor file.  This contains the manually maintained MAC/Vendor mappings for arp-scan.

The first line of the file contains the version number and the last modification date and time.  You can use this to determine if there have been any changes since the version that came with your distribution.

This file only contains the manual mappings.  The IEEE OUI and IAB mappings, which are much larger, are kept in seperate files and can be updated from the IEEE website with the scripts ''get-oui'' and ''get-iab''.

See [[Arp-scan_User_Guide#Keeping_the_vendor_data_up_to_date]] for details of how to update the IEEE files.

<pre>
# $Id: mac-vendor.txt 13068 2008-05-04 18:08:05Z rsh $
# mac-vendor.txt -- Ethernet vendor file for arp-scan
#
# This file contains Ethernet vendor mappings for arp-scan.  These are used
# to determine the vendor for a give Ethernet interface given the MAC address.
#
# Each line of this file contains a MAC-vendor mapping in the form:
#
# <MAC-Prefix><TAB><Vendor>
#
# Where <MAC-Prefix> is the prefix of the MAC address in hex, and <Vendor>
# is the name of the vendor.  The prefix can be of any length from two hex
# digits (one octet) to twelve hex digits (six octets, the entire Ethernet
# hardware address).
#
# For example:
#
# 012345        would match 01:23:45:xx:xx:xx, where xx represents any value;
# 0123456       would match 01:23:45:6x:xx:xx; and
# 01234567      would match 01:23:45:67:xx:xx.
#
# Do not include entries from the IEEE OUI or IAB listings, as these are
# already in the files ieee-oui.txt and ieee-iab.txt, which are automatically
# used by arp-scan.  See get-oui(1) and get-iab(1) for details of how to
# update the OUI and IAB listings.  This file is for MAC addresses that are
# not present in the IEEE listings.
#
# The alphabetic hex characters [A-F] must be entered in upper case.
#
# The order of entries in this file are not important.
#
# arp-scan will attempt to match larger prefixes before trying to match
# smaller ones, and will stop at the first match.
#
# Blank lines and lines beginning with "#" are ignored.
#
# Additional information is available on the arp-scan wiki at
# http://www.nta-monitor.com/wiki
#

# From nmap Debian bug report #369681 dated 31 May 2006
525400  QEMU
B0C420  Bochs

# From RFC 2338: 00-00-5E-00-01-{VRID}
00005E0001      VRRP (last octet is VRID)

# Microsoft WLBS (Windows NT Load Balancing Service)
# http://www.microsoft.com/technet/prodtechnol/acs/reskit/acrkappb.mspx
02BF    Microsoft WLBS (last four octets are IP address)

# Cisco HSRP (Hot Standby Routing Protocol)
# 00-00-0c-07-ac-XX, where XX is the HSRP group number (0 to 255)
00000C07AC      HSRP (last octet is group number)

# Ethernet broadcast address
FFFFFFFFFFFF    Broadcast
</pre>