On 9/10/13 11:53 AM, Stefan Arentz wrote:
I wonder if it makes sense to ban specific MAC address ranges (vendors) from 
appearing in this database. For example I think it would be possible to detect 
specific chipsets as being mobile devices vs stationary access points.

Our stumbler does some of this. MAC addresses encode whether a network is ad-hoc from another device or an infrastructure access point.

Wireshark maintains a list [1] of known vendor OUIs (MAC address prefixes), so we can filter out, say, HTC and Motorola MAC addresses. Filtering Apple's MAC addresses is trickier if we choose to collect desktop and laptop MAC addresses.

[1] https://anonsvn.wireshark.org/wireshark/trunk/manuf


chris
_______________________________________________
dev-security mailing list
dev-security@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security

Reply via email to