cyclevur.blogg.se

That assured me that the device in question was indeed an Apple product. When I did that, the results came back as follows:

The next step is to go the IEEE Standards Association Website that has the "Organizationally Unique Identifier" (OUI) database and enter the first three hex codes, with the colons replaced by dashes:Ĭonvert 00:22:41 to 00-22-41 and Enter in Search Field (I've obscured some of the data with a red block for the sake of privacy.) Now we know the MAC address of the device with IP address 192.168.1.2, and it starts with 00:22:41. When you do this, you may also see other devices that have communicated recently.

You can dump that ping information with the following command in the Terminal: $ arp -a

When your UNIX system pings the other device, it's really using the MAC addresses. It bounces off the target and returns information. As an analogy, think of that as something like a submarine sending out a sonar ping. The way to do this is to open the Terminal app and ping the suspicious IP address. Sounds cool, huh? If you can dump you computer's ARP cache, then you've achieved guru status. Even though there can be 256^3 = 16.7 million devices per manufacturer code, many companies like Apple need more than one of the manufacturer codes. XX or YY ranges from 00 to hexadecimal FF (0 to 255)įor example, the leading XX:XX:XX of 00:22:41 is assigned to Apple. The hexadecimal number is in the form XX:XX:XX:YY:YY:YY where XX:XX:XX identifies the manufacturer and YY:YY:YY identifies the device ID assigned by the manufacturer. My first question was, "What MAC address is this?" The MAC address is the Media Access Control (MAC) address assigned according to the Institute of Electrical and Electronics Engineers (IEEE) standard for identifying Ethernet devices. Little Snitch Doing Its Job - And Creating a Mystery Note: : turns out to be an aggressive Samba search by Path Finder - something that can be suppressed in PF's preferences.) By the way, Little Snitch is a tool I highly recommend. (I'm still working on figuring that part out with the help of Cocoatech Support, maker of Path Finder. Recently, Little Snitch, a security tool, threw up a notice about something odd happening with one of my devices. This HOWTO shows one way to convert that IP address to a MAC address, then a manufacturer. The IP address is known, but little else. Occasionally, one discovers what may appear to be a rogue or unidentified device on the local home network.