How do I find a MAC address in Wireshark? All you have to do is paste the contents of those three bytes into an online OUI lookup tool in order to confirm Wireshark’s initial results. Note: I know that using the web browser I can google for the MAC's first 3 pairs, but I would like some command-line method, so I could script it or use via remote login (SSH).Manual lookup The first three bytes of the frame are the destination OUI, while bytes 6 – 8 are the source OUI. What is the proper command-line way to perform this search? f Force the update, even if the file is newer than 5 days.ĭirectory holding symbolic links to oui.txt and iab.txtīut if I search for IPs on my network: sudo netdiscover -i eth1ĩ2 Captured ARP Req/Rep packets, from 12 hosts. This utility requires curl, wget or libwww-perl to be installed. Update-oui fetches the current version of the OUI and IAB lists from Update-oui - download new version of the OUI and IAB lists I have found some tools that seems to update the OUI MAC address vendor database on my system, like get-oui, airodump-ng-oui-update or update-oui : update-oui(8) OUI update-oui(8)

Wireshark oui lookuo