Man Linux: Main Page and Category List


       get-iab - Fetch the arp-scan IAB file from the IEEE website


       get-iab [options]


       get-iab  fetches the Ethernet IAB file from the IEEE website, and saves
       it in the format used by arp-scan.

       The IAB file contains all of the IABs (Individual Address Blocks)  that
       have  been  registered with IEEE.  Each IAB entry in the file specifies
       the first 36-bits of the 48-bit Ethernet hardware address, leaving  the
       remaining 12-bits for use by the registering organisation.  For example
       the IAB entry "0050C2003", registered  to  Microsoft,  applies  to  any
       Ethernet  hardware  address from 00:50:c2:00:30:00 to 00:50:c2:00:3f:ff
       inclusive.  Each IAB assignment represents  a  total  of  2^12  (4,096)
       Ethernet addresses.

       Major  Ethernet  hardware  vendors  typically  use  an OUI registration
       rather than an IAB registration.  See get-oui(1) for details.

       This script can be used to update the arp-scan IAB file from the latest
       data  on  the  IEEE  website.   It  is  relatively rare to see Ethernet
       addresses from IAB registrations, so the IAB file is not  as  important
       as the OUI file.

       The      IAB      data      is      fetched      from      the      URL and the  output  file  is
       saved  to  the  file  ieee-iab.txt in the current directory. The URL to
       fetch the data from can be changed with the -u option, and  the  output
       file name can be changed with the -f option.

       The  ieee-iab.txt  file that is produced by this script is used by arp-
       scan to determine the Ethernet card vendor from its hardware address.

       The directory that arp-scan will look for the ieee-iab.txt file depends
       on  the  options  used  when  it  was built.  If it was built using the
       default options, then it will look in /usr/local/share/arp-scan.


       -h     Display a brief usage message and exit.

       -f <fn>
              Write the output to the specified file instead  of  the  default

       -u <URL>
              Use  the specified URL to fetch the raw IAB data from instead of
              the default

       -v     Display verbose progress messages.


              The default output file.


       $ get-iab -v
       Renaming ieee-iab.txt to ieee-iab.txt.bak
       Fetching IAB data from
       Fetched 230786 bytes
       Opening output file ieee-iab.txt
       1535 IAB entries written to file ieee-iab.txt


       get-iab  is  implemented  in  Perl,  so  you  need  to  have  the  Perl
       interpreter installed on your system to use it.

       get-iab  uses  the  LWP::Simple  Perl module to fetch the data from the
       IEEE website. You must have this module installed on your system for it
       to  work.  This module is available on most distributions, often called
       libwww-perl.  It is also available in source form from CPAN.

       You can use a proxy  server  by  defining  the  http_proxy  environment


       Roy Hills <>




       arp-fingerprint(1) The arp-scan wiki page.

                                March 30, 2007