Mac Address and Network Interface
Can Wireshark automatically extract the Network Interface Card vendor from the MAC address alone? How is this possible?
add a comment
To add some detail to this: Ethernet NIC manufacturers must acquire ranges of MAC addresses that they are allowed to use. E.g., if I wanted to sell Ethernet NICs I'd have to request a range of MAC addresses which I could use in my NICs.
This MAC address range -> Vendor information is publicly available; Wireshark gathers this publicly available information into the manuf file Graham mentioned.
