Network ops
Bulk MAC vendor lookup
Paste or upload raw output from a switch, router, DHCP server or ARP table, or a CSV. Every address is extracted, checked and matched to its IEEE vendor, with IP, hostname, VLAN and port kept alongside.
Paste device output or open a fileFree up to 5 addresses
Cisco, Nexus, Huawei, H3C and Aruba MAC tables, ARP from Windows, macOS and Linux, DHCP leases and bindings, CSV with headers and plain lists.
How it works
- 01
Paste or upload
Copy the table straight from the device, or open a CSV, log or leases file: show mac address-table, show ip arp, display mac-address, arp -a, ip neigh, dhcpd.leases, dnsmasq leases or a spreadsheet export.
- 02
Addresses are extracted
Every MAC is found in any notation, validated and de-duplicated. IP, hostname, VLAN and port are read from the same row when the layout or the column headers provide them.
- 03
Vendors are matched
Each address is matched against the IEEE MA-L, MA-M and MA-S registries by longest prefix. Randomized and unregistered addresses are counted, and you can filter by vendor before exporting.
What it is used for
Asset inventory audits
Turn a switch or DHCP dump into a vendor-labelled spreadsheet you can compare against your CMDB.
Finding unknown devices
Filter to unregistered vendors, unexpected manufacturers and duplicate addresses that point to a rogue or cloned device.
Tracing a MAC to a port
Keep the VLAN, port and hostname next to each address so you can find where a device is plugged in.
Spotting randomized clients
Wi-Fi privacy addresses are flagged and counted separately, so they are not mistaken for unknown hardware.
Frequently asked questions
Which formats can I paste or upload?
Colon, hyphen, Cisco dotted (0011.2233.4455), Huawei / H3C (0011-2233-4455), HPE (001122-334455) and bare 12-digit notation, mixed in any order. Cisco, Nexus, Huawei, H3C and Aruba MAC tables, Windows, macOS and Linux ARP, ip neigh, bridge fdb, show ip dhcp binding, dhcpd.leases, dnsmasq leases and Windows DHCP lease lists are read for IP, hostname, VLAN and port. A CSV or tab-separated paste with a header row works too.
How is the vendor identified?
The first 24, 28 or 36 bits are matched against the IEEE MA-L, MA-M and MA-S registries, and the longest matching prefix wins. The table shows which registry the match came from.
Why does an address show as randomized?
When the second bit of the first byte is set, the address was assigned by software rather than burned in by a manufacturer. Phones and laptops use such addresses for Wi-Fi privacy, and virtual machines and containers use them too, so no vendor is listed.
What is in the XLSX export?
A Devices sheet with the MAC in colon and Cisco notation, OUI, vendor, registry, IP, hostname, VLAN, port, randomized, local, multicast and duplicate columns plus the source line, and a Vendors sheet with counts and shares. The export follows the current filter and search.
Is my data uploaded?
Files are read and parsed in your browser. To match vendors, only the MAC addresses are sent to our lookup endpoint; the surrounding text, IPs, hostnames, VLANs and ports stay on your device.
What are the free and Pro limits?
Free use processes the first 5 addresses of a paste or file so you can check the results on screen. Pro processes up to 5,000 lines per run and unlocks copying the table and exporting to CSV and XLSX.