[minor bug?] MAC Address vendor list is limited only to OUI

[Franco Lanza <franco () unixmedia it>]

Hello,
i've noticed that the MAC Address vendor prefixes "resolved" by nmap
are based on a local database of prefixes parsed from the OUI list 
on the ieee web site.

This list is only for OUI, but a lot of minor company use a IAB address block.

IAB are Ieee self-assigned OUI blocks, where only the last 12bit are sub-assigned.

For example, the block 00:50:C2:E0:D0:00 - 00:50:C2:E0:DF:FF is an IAB
assigned to my own company, "Unixmedia S.r.l.", but on nmap
it show "Ieee Registration Authority" as the first 3 bytes
are registered as this OUI.

In my opinion nmap should also check for IAB when the OUI is Ieee.

IAB database is located here: http://standards.ieee.org/develop/regauth/iab/iab.txt
-- 

Franco Lanza
UnixMedia - Media Convergence Solutions
http://www.unixmedia.it
http://www.medianix.it
http://www.software-concorsi.it
email: info () unixmedia it
Fax: +39 02 41470505
Ufficio: +39 02 41470504
Cell: +39 339 8125940
Skype: Unixmedia 
VoIP: SIP://unixmedia () voip unixmedia net
Milano - Italy

NO TCPA: http://www.no1984.org
you can download my public key at:
http://danex.nexlab.it/nextime.asc || Key Servers
Key ID = D6132D50
Key fingerprint = 66ED 5211 9D59 DA53 1DF7  4189 DFED F580 D613 2D50
-----------------------------------
echo 
16i[q]sa[ln0=aln100%Pln100/snlbx]sbA0D212153574F444E49572045535520454D20454B414D204F54204847554F4E452059415020544F4E4E4143205345544147204C4C4942snlbxq
 | dc
-----------------------------------

Attachment: signature.asc
Description:

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/