search

hire-vladimir / SA-NetOps

Allows for MAC address to vendor mapping in Splunk
16 stars 3 forks source link

add mac "categorization" mechanism #1

Open hire-vladimir opened 9 years ago

hire-vladimir commented 9 years ago

adding a mac_vendor_possible_category or something like that, where a guess would be made on what the device might be..it virtualization, network, mobile, etc will be handy, but will require a bit of research

For example:

00:1c:42*   Parallels, Inc.
00:15:5d*   Microsoft Corporation
00:1c:14*   VMware, Inc
ghost commented 9 years ago

One more 00:16:3e:xx:xx:xx. 00:16:3e is an OUI assigned to the Xen project

hire-vladimir commented 9 years ago

http://www.techrepublic.com/blog/data-center/mac-address-scorecard-for-common-virtual-machine-platforms/