get-oui - Fetch the arp-scan OUI file from the IEEE website (on Debian and
Debian based systems, data is fetched from ieee-data package)
fetches the Ethernet OUI file from the IEEE website, and saves it
in the format used by arp-scan.
The OUI file contains all of the OUIs (Organizationally Unique Identifiers) that
have been registered with IEEE. Each OUI entry in the file specifies the first
24-bits of the 48-bit Ethernet hardware address, leaving the remaining 24-bits
for use by the registering organisation. For example the OUI entry
"080020", registered to Sun Microsystems, applies to any Ethernet
hardware address from 08:00:20:00:00:00
inclusive. Each OUI assignment represents a total of 2^24 (16,777,216)
Every major Ethernet hardware vendor registers an OUI for their equipment, and
larger vendors will need to register more than one. For example, 3Com have a
total of 37 OUI entries. Organisations that only produce a small number of
Ethernet devices will often obtain an IAB registration instead. See
(1) for details.
This script can be used to update the arp-scan
OUI file from the latest
data on the IEEE website. Most of the Ethernet addresses in use belong to an
OUI registration, so this is the most important of the files that
uses to decode Ethernet hardware addresses. You should
therefore run get-oui
occasionally to keep the arp-scan
up to date.
The OUI data is fetched from the URL
(on Debian and Debian
based systems, data is fetched from ieee-data package) and the output file is
saved to the file ieee-oui.txt
in the current directory. The URL to
fetch the data from can be changed with the -u
option, and the output
file name can be changed with the -f
file that is produced by this script is used by
to determine the Ethernet card vendor from its hardware
The directory that arp-scan
will look for the ieee-oui.txt
depends on the options used when it was built. If it was built using the
default options, then it will look in /usr/local/share/arp-scan
- Display a brief usage message and exit.
- -f <fn>
- Write the output to the specified file instead of the
- -u <URL>
- Use the specified URL to fetch the raw OUI data from
instead of the default
http://standards.ieee.org/regauth/oui/oui.txt. (on Debian and
Debian based systems, data is fetched from ieee-data package by
- Display verbose progress messages.
- The default output file.
$ get-oui -v
Renaming ieee-oui.txt to ieee-oui.txt.bak
Fetching OUI data from http://standards.ieee.org/regauth/oui/oui.txt
Fetched 1467278 bytes
Opening output file ieee-oui.txt
9274 OUI entries written to file ieee-oui.txt
is implemented in Perl, so you need to have the Perl interpreter
installed on your system to use it.
uses the LWP::Simple
Perl module to fetch the data from
the IEEE website. You must have this module installed on your system for it to
work. This module is available on most distributions, often called
. It is also available in source form from CPAN.
You can use a proxy server by defining the http_proxy
Roy Hills <Roy.Hills@nta-monitor.com>
The arp-scan wiki page.