- This topic has 0 replies, 1 voice, and was last updated 19 hours, 37 minutes ago by
Pankaj6in.
- AuthorPosts
Pankaj6in
KeymasterYes, it is possible to determine a vendor’s address, but the “address” usually refers to the MAC address vendor identification, not a physical location.
How it Works
Every network device has a MAC address (Media Access Control), which is globally unique. The first 3 bytes (OUI – Organizationally Unique Identifier) identify the vendor/manufacturer, registered with IEEE. By looking up the OUI in public/vendor databases, you can determine which company made the device.To trace the physical location, additional data like IP geolocation, network topology, or on-site inspection is needed — MAC address alone does not give an exact street address.
Devices/Tools Required
Network Analyzers (e.g., Fluke Networks LinkRunner, Keysight Network Tester)Switches/Routers CLI (e.g., Cisco show mac address-table, HPE Aruba show arp, Juniper show ethernet-switching table)
Wireshark (free software to capture packets and identify vendor from MAC)
NAC Systems (e.g., Cisco ISE, Aruba ClearPass) to identify endpoints and vendors automatically
Example from Different OEMs
Cisco Catalyst Switch:css
Copy
Edit
Switch# show mac address-table
Mac Address Type Ports
00:1A:2B:xx:xx:xx DYNAMIC Gi1/0/1
The prefix 00:1A:2B can be looked up to find it’s registered to Dell Inc.Juniper EX Series:
sql
Copy
Edit
show ethernet-switching table | match xx:xx:xx
This lists MACs and ports, allowing vendor lookup.HPE Aruba Switch:
sql
Copy
Edit
show arp
The output MAC prefix can be cross-checked with IEEE’s OUI database.Summary:
Vendor identification = via MAC OUI lookup
Physical address = needs IP geolocation or site survey
Tools = network analyzers, CLI on switches/routers, NAC solutions
- AuthorPosts