Wireshark-dev: Re: [Wireshark-dev] Microsoft-XBOX OUI shown as "Microsof"
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Sun, 5 Nov 2017 20:25:08 -0800
On Nov 5, 2017, at 7:05 PM, Richard Sharpe <realrichardsharpe@xxxxxxxxx> wrote:

> I am seeing the Microsoft-XBOX OUI 00-50-F2 appear is "(Microsof)" in
> some dissections, as shown in the attached.
> 
> I cannot find where this is coming from. Does anyone know?

It's coming from the script that generates the manuf file truncating "Microsoft Corp." to 8 characters and making that the second field in the file, and *Shark using that field as what it puts in parentheses after an OUI.

Perhaps it should use the third field, instead, which is "Microsoft Corp." in the manuf file you get from a build of the tip of the master branch, and reserve the 8-character version for showing MAC addresses that don't have names associated with them as {MANUF}_xxxxxx.