Comments on this hack

Showing messages 1 through 6 of 6.

• corrected version
  2006-07-15 19:39:51  willc2 [View]
  
  
  
#!/usr/bin/perl

my %cards;
my %ips;

open(ARP,"arp -an|") || die "Couldn't open arp table: $!\n";

print "Looking up OUIs.";
while(<ARP>) {
chomp;
my $addr = $_;
my $ip = $_;
$addr =~ s/.* ([\d\w]+:[\d\w]+:[\d\w]+):.*/$1/;
$addr =~ s/\b([\d\w])\b/0$1/g;
$addr =~ s/:/-/g;
next unless $addr =~ /..-..-../;

$ip =~ s/.*?(\d+\.\d+\.\d+\.\d+).*/$1/;
print ".";
$cards{$addr}||=`curl -sd 'x=$addr' http://standards.ieee.org/cgi-bin/ouisearch`;
($cards{$addr} =~ /Sorry!/) && ($cards{$addr} = "Unknown OUI: $addr");
$ips{$ip} = $addr;
}
print "\n";
for(keys(%ips)) {
$cards{$ips{$_}} =~ s/.*.hex.\s+([\w\s\,\.-]+)\n.*/$1/s;
print "$_ -> $cards{$ips{$_}}\n";
}

• corrected version
  2006-07-15 19:42:04  willc2 [View]
  
  
  It took me 20 seconds to post this corrected version.
  
  Nobody could do that in the 3 years this page has been here?

• hmmm...
  2004-04-09 23:00:20  lu.schreier [View]
  
  
  lambda# perl find_mac.pl
  Looking up OUIs....
  192.168.1.192 ->
  192.168.1.1 ->
  192.168.1.255 ->
  lambda#
  
  
  This is a FreeBSD 5.2.1 machine, R40e IBM notebook with onboard broadcom network adatper that actually works fine.
  Something wrong with the IEEE URL maybe?
  
  I'm into C, so I just get a little of the perl code.
  
  Best Wishes,
  
  Ludwig Schreier

• beautiful idea (small bug)
  2003-12-17 13:12:47  jzsimon [View]
  
  
  I love the idea, and the implementation is elegant. A great hack!
  
  One small bug is that when I tried it on my local subnet, the Hewlett-Packards (00-01-E6) produced a string of HTML rather than the string "Hewlett-Packard". The IEEE database doesn't seem to handle Hewlett-Packard any differently, so maybe the "-" in the name throws off the parsing in perl (I know enough perl to not try to figure out what's going on in the script!).
• beautiful idea (small bug)--fix
  2003-12-18 11:07:31  jzsimon [View]
  
  
  In the line beginning with
  
  $cards{$ips
  
  put a single hyphen '-' just before the ending square bracket ']' so that the line reads:
  
  $cards{$ips{$_}} =~ s/.*.hex.\s+([\w\s\,\.-]+)\n.*/$1/s;
  
  Isn't perl wonderful?

• error in program as printed
  2003-12-17 13:03:40  jzsimon [View]
  
  
  The line beginning:
  $cards{$addr}|
  has the string
  [RETURN]
  which should be removed. (In the book this corresponds to the return symbol.