Ask Your Question
0

Wireshark OUI Lookup Tool Broken

asked 2020-05-21 18:15:03 +0000

Noah Smith gravatar image

updated 2020-05-21 18:16:21 +0000

Anyone else having issues with their tool here? https://www.wireshark.org/tools/oui-l...

It cannot accept formats outputted from Cisco, Brocade/Ruckus, and many other vendors. It does not seem to work with the first format in their example.

Example: 00d9.d110.21f9 No Matches

Example: 00:d9:d1:10:21:f9 00:D9:D1 Sony Interactive Entertainment Inc.

edit retag flag offensive close merge delete

Comments

Can you provide some examples that don't work?

Some recent work was done on the tool, so I would expect it to be working better than it had before. See Bug 16038.

cmaynard gravatar imagecmaynard ( 2020-05-21 18:18:50 +0000 )edit

Example: 00d9.d110.21f9 No Matches

Example: 00:d9:d1:10:21:f9 00:D9:D1 Sony Interactive Entertainment Inc.

Noah Smith gravatar imageNoah Smith ( 2020-05-21 18:19:58 +0000 )edit

These formats all work:

OUI search           Results
00:d9:d1             00:D9:D1 Sony Interactive Entertainment Inc.
00-d9-d1             00:D9:D1 Sony Interactive Entertainment Inc.
00.d9.d1             00:D9:D1 Sony Interactive Entertainment Inc.
00:d9:d1:10:21:f9    00:D9:D1 Sony Interactive Entertainment Inc.
00-d9-d1-10-21-f9    00:D9:D1 Sony Interactive Entertainment Inc.
00.d9.d1.10.21.f9    00:D9:D1 Sony Interactive Entertainment Inc.
cmaynard gravatar imagecmaynard ( 2020-05-21 18:32:52 +0000 )edit

Can you please try this format (format of any Cisco device, and #1 on the example list): 6412.25e4.2d62

Noah Smith gravatar imageNoah Smith ( 2020-05-21 18:34:26 +0000 )edit

Sorry, I didn't mean to imply that all formats worked, only those formats that I listed. The bug I linked to refers to the recent work done on the OUI tool, and apparently not every format is supported, whether by omission or by design. The example on the OUI lookup page works, namely 0000.0c, and so does 6412.25, but other formats don't work as you've discovered. I'd recommend adding a comment to the bug report asking about this, and then either someone (Peter, most likely) can either explain why it's not supported or reopen the bug to fix the tool.

cmaynard gravatar imagecmaynard ( 2020-05-21 18:42:36 +0000 )edit

Will do! Thanks for your reply, sorry for the confusion. I would imagine that this is the most popular format for the tool.

Noah Smith gravatar imageNoah Smith ( 2020-05-21 18:43:55 +0000 )edit

I'll restore support for other formats. It was removed because these were not documented as valid options and the old parser was overly permissive. You can follow progress in the bug linked by Guy below.

Lekensteyn gravatar imageLekensteyn ( 2020-05-21 19:33:44 +0000 )edit

Awesome! I was just curious as that format is the first in the examples and widely used. Glad to hear it's getting fixed!

Noah Smith gravatar imageNoah Smith ( 2020-05-21 19:41:19 +0000 )edit

48d6-d5e2-a67c Is another popular format (HP) that is also not supported by the lookup tool.

Noah Smith gravatar imageNoah Smith ( 2020-05-21 20:01:29 +0000 )edit

A fix has been implemented and deployed, thanks for raising this!

Lekensteyn gravatar imageLekensteyn ( 2020-05-21 21:10:51 +0000 )edit

This site seems to provide better results for its lookup tool: https://aruljohn.com/mac.pl. It doesn't care how many octets you supply, nor does it care what the byte separator is (even this works: 48*D6&D5^E2@A6), or how the bytes are grouped.

cmaynard gravatar imagecmaynard ( 2020-05-21 21:15:02 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted
0

answered 2020-05-21 18:44:08 +0000

Guy Harris gravatar image

updated 2020-05-21 18:53:31 +0000

cmaynard gravatar image

This looks like bug 16506.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2020-05-21 18:15:03 +0000

Seen: 815 times

Last updated: May 21 '20