NAME¶
get-iab - Fetch the arp-scan IAB file from the IEEE website
SYNOPSIS¶
get-iab [
options]
DESCRIPTION¶
get-iab fetches the Ethernet IAB file from the IEEE website, and saves it
in the format used by arp-scan.
The IAB file contains all of the IABs (Individual Address Blocks) that have been
registered with IEEE. Each IAB entry in the file specifies the first 36-bits
of the 48-bit Ethernet hardware address, leaving the remaining 12-bits for use
by the registering organisation. For example the IAB entry
"0050C2003", registered to Microsoft, applies to any Ethernet
hardware address from
00:50:c2:00:30:00 to
00:50:c2:00:3f:ff
inclusive. Each IAB assignment represents a total of 2^12 (4,096) Ethernet
addresses.
Major Ethernet hardware vendors typically use an OUI registration rather than an
IAB registration. See
get-oui(1) for details.
This script can be used to update the
arp-scan IAB file from the latest
data on the IEEE website. It is relatively rare to see Ethernet addresses from
IAB registrations, so the IAB file is not as important as the OUI file.
The IAB data is fetched from the URL
http://standards.ieee.org/regauth/oui/iab.txt and the output file is
saved to the file
ieee-iab.txt in the current directory. The URL to
fetch the data from can be changed with the
-u option, and the output
file name can be changed with the
-f option.
The
ieee-iab.txt file that is produced by this script is used by
arp-scan to determine the Ethernet card vendor from its hardware
address.
The directory that
arp-scan will look for the
ieee-iab.txt file
depends on the options used when it was built. If it was built using the
default options, then it will look in
/usr/local/share/arp-scan.
OPTIONS¶
- -h
- Display a brief usage message and exit.
- -f <fn>
- Write the output to the specified file instead of the default
ieee-iab.txt.
- -u <URL>
- Use the specified URL to fetch the raw IAB data from instead of the
default http://standards.ieee.org/regauth/oui/iab.txt
- -v
- Display verbose progress messages.
FILES¶
- ieee-iab.txt
- The default output file.
EXAMPLES¶
$ get-iab -v
Renaming ieee-iab.txt to ieee-iab.txt.bak
Fetching IAB data from http://standards.ieee.org/regauth/oui/iab.txt
Fetched 230786 bytes
Opening output file ieee-iab.txt
1535 IAB entries written to file ieee-iab.txt
NOTES¶
get-iab is implemented in Perl, so you need to have the Perl interpreter
installed on your system to use it.
get-iab uses the
LWP::Simple Perl module to fetch the data from
the IEEE website. You must have this module installed on your system for it to
work. This module is available on most distributions, often called
libwww-perl. It is also available in source form from CPAN.
You can use a proxy server by defining the
http_proxy environment
variable.
AUTHOR¶
Roy Hills <Roy.Hills@nta-monitor.com>
SEE ALSO¶
- arp-scan(1)
- get-oui(1)
- arp-fingerprint(1)
http://www.nta-monitor.com/wiki/ The arp-scan wiki page.