12

I'm analyzing a big list of devices, and trying to detect the type of each one of them using different data. one of the data types I have is MAC Address, and i encountered the following mac address prefix - 40:ed:98.

Searching some sites it says that the mac address belong to IEEE Registration Authority, the authority that sets the mac prefixes to different companies.

As far as i know and looked - IEEE doesn't make devices - so which company does the prefix actually belong to ?

Thanks

Tetsujin
  • 49,589
Golden
  • 219

3 Answers3

20

The main problem is that those websites have an outdated concept of how OUIs work. Manufacturer prefixes are not always 24 bits long – they used to be in the past, but now IEEE offers both 28-bit and 36-bit prefixes (for a reduced price).

So when you see a 24-bit prefix that is allocated to IEEE itself, that means it's the "base" from which IEEE assigns those longer prefixes. For example, 40-ED-98-3 is assigned to Knox and 40-ED-98-7 is assigned to Vaisala Oyj.

You'll find the real assignments beginning with 40-ED-98 in the OUI-28 (MA-M) registry. There are three vendor prefix registries:

with a web-based search page here (select "All MAC (MA-L, MA-M, MA-S)" as the database).

(It's a very similar situation as with IPv4 "classful" addresses – everyone used to get the same size block, and it turned out that there are not enough possible 'prefixes', and at the same time many manufacturers really need a much smaller block than is offered. So the solution was to designate a block of longer prefixes.)

u1686_grawity
  • 452,512
8

Some MAC addresses from the Wireshark database

40:ED:98:00:00:00/28    Tsinghua    Tsinghua Tongfang Co., LTD
40:ED:98:10:00:00/28    Guangzho    GuangZhou FiiO Electronics Technology Co.,Ltd
40:ED:98:20:00:00/28    A-Iox       A-Iox Inc.
40:ED:98:30:00:00/28    Knox        Knox Company
40:ED:98:40:00:00/28    Kendrion    Kendrion Kuhnke Automation GmbH
40:ED:98:50:00:00/28    Cape        
40:ED:98:60:00:00/28    Shanghai    Shanghai Broadwan Communications Co.,Ltd
40:ED:98:70:00:00/28    VaisalaO    Vaisala Oyj
40:ED:98:80:00:00/28    Guangzho    Guangzhou Auric Intelligent Technology Co.,Ltd.
40:ED:98:90:00:00/28    Teratron    TeraTron GmbH
40:ED:98:A0:00:00/28    Integrat    Integrated Design Ltd
40:ED:98:B0:00:00/28    SiebertI    Siebert Industrieelektronik GmbH
40:ED:98:C0:00:00/28    Bloomsky    BloomSky,Inc.
40:ED:98:D0:00:00/28    Hangzhou    Hangzhou GANX Technology Co.,Ltd.
40:ED:98:E0:00:00/28    BordaTec    Borda Technology
G-Man Says 'Reinstate Monica'
  • 7,827
RudyB
  • 308
6

That is a prefix for a 20-bit sub-block allocated by IEEE. You need to look at the next nybble for company ID in the MAC Address Block Medium (MA-M) list.

Justme
  • 1,559