wireless traffic

Does anybody know where I can locate a list of MAC address prefixes that
belong specifically to wireless NIC cards? I am looking for a method of
discovering what devices on my network are wireless devices.

Art Houle e-mail: houle@acns.fsu.edu.
Academic Computing & Network Services Voice: 850-644-2591
Florida State University FAX: 850-644-8722

Power down the wireless hub and see who calls? :wink:

Seriously though - your wireless hub/transmitter may have a queryable
arp table that will tell you what's not using the wire....

Does anybody know where I can locate a list of MAC address prefixes that
belong specifically to wireless NIC cards? I am looking for a method of
discovering what devices on my network are wireless devices.

Power down the wireless hub and see who calls? :wink:

Seriously though - your wireless hub/transmitter may have a queryable
arp table that will tell you what's not using the wire....

i've used/seen cards with these prefixes:

00:e0:29 - smc
00:02:2d - orinoco/wavelan cards (lucent/agere)

however, there's nothing to stop the vendor from using a given prefix
for wired cards as well. more to the point, it's relatively trivial
to change the hardware address of the card, so all bets are off (read
as: mac address filtering is useless).

some other possibilities,
use SNMP to read from access point. Lucent APs and WPs support(Unofficially) it.
If you need perl/shell script let me know.

Read from the switch port to which your wireless basestation/bridge
is connected to.

-antony

The NetStumbler tool (www.netstumbler.com) appears to have a fairly good
MAC to vendor mapping, and may have helpful information. Their database
shows a full range of MAC addreses, which could give you a starting point.

OTOH, it's easy enough to change MAC addresses - you'd probably be better
off pulling the information from your access point - the lucent gear
certainly allows you to do so, but I can't speak for any others.

cheers!

Taken from the file that sets the iwconfig options for Redhat
v7.1(/etc/pcmcia/wireless.opts)

Lucent Wavelan IEEE (+ Orinoco, RoamAbout and ELSA)
Melco/Buffalo Networks WLI-PCM-L11
*,*,*,00:60:1D:*|*,*,*,00:02:2D:*)

Cisco/Aironet 4800/340
*,*,*,00:40:96:*)

Samsung MagicLan (+ some other PrismII cards)
*,*,*,00:00:F0:*|*,*,*,00:02:78:*)

Raytheon Raylink/WebGear Aviator2.4
*,*,*,00:00:8F:*|*,*,*,00:00:F1:*)

Old Lucent Wavelan
*,*,*,08:00:0E:*)

Netwave (Xircom Netwave/Netwave Airsurfer)
*,*,*,00:80:C7:*)

based on the reply stream so far I guess there aren't really that
many "standards lawyers" here.

IEEE maintains a list of "AUI prefixes". You can get a copy
various places, I'd start with www.iana.org. Or, walk around
your organization and your local computer store and write down the
first three bytes on the mac address listed on the box (assuming
they document it on the box)

sure, you can change the mac address. you can also convert a pringle's
can into a radio antenna. bfd. if you are looking for a first-order
approximation don't worry about that.

try vacuum's APTools:

  http://aptools.sourceforge.net/

-d.