Subversion Repositories oidinfo_api

Rev

Rev 34 | Blame | Compare with Previous | Last modification | View Log | RSS feed

  1. <?php
  2.  
  3. /*
  4.  * MAC (EUI-48 and EUI-64) utils for PHP
  5.  * Copyright 2017 - 2023 Daniel Marschall, ViaThinkSoft
  6.  * Version 2023-07-13
  7.  *
  8.  * Licensed under the Apache License, Version 2.0 (the "License");
  9.  * you may not use this file except in compliance with the License.
  10.  * You may obtain a copy of the License at
  11.  *
  12.  *     http://www.apache.org/licenses/LICENSE-2.0
  13.  *
  14.  * Unless required by applicable law or agreed to in writing, software
  15.  * distributed under the License is distributed on an "AS IS" BASIS,
  16.  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  17.  * See the License for the specific language governing permissions and
  18.  * limitations under the License.
  19.  */
  20.  
  21. // Very good resources for information about OUI, EUI, MAC, ...
  22. // - https://mac-address.alldatafeeds.com/faq#how-to-recognise-mac-address-application
  23. // - https://standards.ieee.org/wp-content/uploads/import/documents/tutorials/eui.pdf
  24. // - https://en.m.wikipedia.org/wiki/Organizationally_unique_identifier
  25.  
  26. const IEEE_MAC_REGISTRY = __DIR__ . '/../web-data';
  27.  
  28. if (!function_exists('_random_int')) {
  29.         function _random_int($min, $max) {
  30.                 // This function tries a CSRNG and falls back to a RNG if no CSRNG is available
  31.                 try {
  32.                         return random_int($min, $max);
  33.                 } catch (Exception $e) {
  34.                         return mt_rand($min, $max);
  35.                 }
  36.         }
  37. }
  38.  
  39. /**
  40.  * Generates a random new AAI.
  41.  * @param int $bits Must be 48 or 64
  42.  * @param bool $multicast Should it be multicast?
  43.  */
  44. function gen_aai(int $bits, bool $multicast): string {
  45.         if (($bits != 48) && ($bits != 64)) throw new Exception("Invalid bits for gen_aai(). Must be 48 or 64.");
  46.         $bytes = [];
  47.         for ($i=0; $i<($bits==48?6:8); $i++) {
  48.                 $val = _random_int(0x00, 0xFF);
  49.                 if ($i == 0) {
  50.                         // Make it an AAI
  51.                         $val = $val & 0xF0 | ($multicast ? 0x03 : 0x02);
  52.                 }
  53.                 $bytes[] = sprintf('%02x',$val);
  54.         }
  55.         return strtoupper(implode('-',$bytes));
  56. }
  57.  
  58. /**
  59.  * Checks if a MAC, EUI, ELI, AAI, SAI, or IPv6-Link-Local address is valid
  60.  * @param string $mac MAC, EUI, or IPv6-Link-Local Address
  61.  * @return bool True if it is valid
  62.  */
  63. function mac_valid(string $mac): bool {
  64.         $tmp = ipv6linklocal_to_mac48($mac);
  65.         if ($tmp !== false) $mac = $tmp;
  66.  
  67.         $mac = str_replace(array('-', ':'), '', $mac);
  68.         $mac = strtoupper($mac);
  69.  
  70.         if ((strlen($mac) != 12) && (strlen($mac) != 16)) return false;
  71.  
  72.         $mac = preg_replace('@[0-9A-F]@', '', $mac);
  73.  
  74.         return ($mac === '');
  75. }
  76.  
  77. /**
  78.  * Returns the amount of bits of a MAC, EUI, ELI, AAI, or SAI
  79.  * @param string $mac
  80.  * @return false|int
  81.  */
  82. function eui_bits(string $mac) {
  83.         if (!mac_valid($mac)) return false;
  84.         $mac = mac_canonize($mac, '');
  85.         return (int)(strlen($mac)*4);
  86. }
  87.  
  88. /**
  89.  * Canonizes a MAC, EUI, ELI, AAI, SAI, or IPv6-Link-Local address
  90.  * @param string $mac MAC, EUI, ELI, or IPv6-Link-Local Address
  91.  * @param string $delimiter Desired delimiter for inserting between each octet
  92.  * @return string|false The canonized address (Note: IPv6-Link-Local becomes EUI-64)
  93.  */
  94. function mac_canonize(string $mac, string $delimiter="-") {
  95.         if (!mac_valid($mac)) return false;
  96.  
  97.         $tmp = ipv6linklocal_to_mac48($mac);
  98.         if ($tmp !== false) $mac = $tmp;
  99.  
  100.         $mac = strtoupper($mac);
  101.         $mac = preg_replace('@[^0-9A-F]@', '', $mac);
  102.         if ((strlen($mac) != 12) && (strlen($mac) != 16)) return false;
  103.         $mac = preg_replace('@^(..)(..)(..)(..)(..)(..)(..)(..)$@', '\\1'.$delimiter.'\\2'.$delimiter.'\\3'.$delimiter.'\\4'.$delimiter.'\\5'.$delimiter.'\\6'.$delimiter.'\\7'.$delimiter.'\\8', $mac);
  104.         return preg_replace('@^(..)(..)(..)(..)(..)(..)$@', '\\1'.$delimiter.'\\2'.$delimiter.'\\3'.$delimiter.'\\4'.$delimiter.'\\5'.$delimiter.'\\6', $mac);
  105. }
  106.  
  107. /**
  108.  * @param string $file
  109.  * @param string $registry_name
  110.  * @param string $mac
  111.  * @return false|string
  112.  */
  113. function _lookup_ieee_registry(string $file, string $registry_name, string $mac) {
  114.         $mac = mac_canonize($mac, '');
  115.         if ($mac === false) return false;
  116.         $begin = substr($mac, 0, 2).'-'.substr($mac, 2, 2).'-'.substr($mac, 4, 2);
  117.         $f = file_get_contents($file);
  118.  
  119.         $f = str_replace("\r", '', $f);
  120.  
  121.         # We are using a positive-lookahead because entries like the MA-M references have a blank line between organization and address
  122.         preg_match_all('@^\s*'.preg_quote($begin, '@').'\s+\(hex\)\s+(\S+)\s+(.*)\n\n\s*(?=[0-9A-F])@ismU', "$f\n\nA", $m, PREG_SET_ORDER);
  123.         foreach ($m as $n) {
  124.                 preg_match('@(\S+)\s+\(base 16\)(.*)$@ism', $n[2], $m);
  125.  
  126.                 if (preg_match('@(.+)-(.+)@ism', $m[1], $o)) {
  127.                         $z = hexdec(substr($mac, 6, 6));
  128.                         $beg = hexdec($o[1]);
  129.                         $end = hexdec($o[2]);
  130.                         if (($z < $beg) || ($z > $end)) continue;
  131.                 } else {
  132.                         $beg = 0x000000;
  133.                         $end = 0xFFFFFF;
  134.                 }
  135.  
  136.                 $x = trim(preg_replace('@^\s+@im', '', $m[2]));
  137.  
  138.                 # "PRIVATE" entries are only marked at the "(hex)" line, but not at the "(base16)" line
  139.                 if ($x == '') $x = trim($n[1]);
  140.  
  141.                 $x = explode("\n", $x);
  142.  
  143.                 // The 12 is hardcoded and is valid for MAC-48 and MAC-64!
  144.                 // Reason: The length of the prefix is calculated from MAC-48. MAC-64 just extends the vendor-specific part
  145.                 // end-beg (= range)  OUI24 0xFFFFFF  len=6    12-6 = 6 nibbles prefix
  146.                 //                    OUI28 0xFFFFF   len=5    12-5 = 7 nibbles prefix
  147.                 //                    OUI36 0xFFF     len=3    12-3 = 9 nibbles prefix
  148.                 $prefix_len = 12-strlen(dechex($end-$beg));
  149.  
  150.                 $out = sprintf("%-32s 0x%s\n", "IEEE $registry_name:", substr($mac, 0, $prefix_len));
  151.                 $out .= sprintf("%-32s 0x%s\n", "Vendor-specific part:", substr($mac, $prefix_len));
  152.                 $out .= sprintf("%-32s %s\n", "Registrant:", $x[0]);
  153.  
  154.                 foreach ($x as $n => $y) {
  155.                         if ($n == 0) continue;
  156.                         else if ($n == 1) $out .= sprintf("%-32s %s\n", "Address of registrant:", $y);
  157.                         else if ($n >= 2) $out .= sprintf("%-32s %s\n", "", $y);
  158.                 }
  159.  
  160.                 return $out;
  161.         }
  162.  
  163.         return false;
  164. }
  165.  
  166. /**
  167.  * Try to Decapsulate EUI-64 into MAC-48 or EUI-48
  168.  * @param string $eui64
  169.  * @return false|string If EUI-64 can be converted into EUI-48, returns EUI-48, otherwise returns EUI-64. On invalid input, return false.
  170.  */
  171. function eui64_to_eui48(string $eui64) {
  172.         if (!mac_valid($eui64)) return false;
  173.         $eui64 = mac_canonize($eui64, '');
  174.         if (eui_bits($eui64) == 48) return mac_canonize($eui64);
  175.         if (($eui64[1] != '0') && ($eui64[1] != '4') && ($eui64[1] != '8') && ($eui64[1] != 'C')) return false; // only allow EUI
  176.  
  177.         if (substr($eui64, 6, 4) == 'FFFF') {
  178.                 // EUI-64 to MAC-48
  179.                 return mac_canonize(substr($eui64, 0, 6).substr($eui64, 10, 6));
  180.         } else if (substr($eui64, 6, 4) == 'FFFE') {
  181.                 if ((hexdec($eui64[1])&2) == 2) {
  182.                         // Modified EUI-64 to MAC/EUI-48
  183.                         $eui64[1] = dechex(hexdec($eui64[1])&253); // remove bit
  184.                         return mac_canonize(substr($eui64, 0, 6).substr($eui64, 10, 6));
  185.                 } else {
  186.                         // EUI-64 to EUI-48
  187.                         return mac_canonize(substr($eui64, 0, 6).substr($eui64, 10, 6));
  188.                 }
  189.         } else {
  190.                 return mac_canonize($eui64);
  191.         }
  192. }
  193.  
  194. /**
  195.  * MAC-48 to EUI-64 Encapsulation
  196.  * @param string $mac48 MAC-48 address
  197.  * @return false|string EUI-64 address
  198.  */
  199. function mac48_to_eui64(string $mac48) {
  200.         // Note: MAC-48 is used for network hardware; EUI-48 is used to identify other devices and software.
  201.         //       MAC48-to-EUI64 Encapsulation uses 0xFFFF middle part
  202.         if (!mac_valid($mac48)) return false;
  203.         $mac48 = mac_canonize($mac48, '');
  204.         if (eui_bits($mac48) == 64) return mac_canonize($mac48);
  205.         if (($mac48[1] != '0') && ($mac48[1] != '4') && ($mac48[1] != '8') && ($mac48[1] != 'C')) return false; // only allow EUI
  206.  
  207.         $eui64 = substr($mac48, 0, 6).'FFFF'.substr($mac48, 6, 6);
  208.         return mac_canonize($eui64);
  209. }
  210.  
  211. /**
  212.  * EUI-48 to EUI-64 Encapsulation
  213.  * @param string $eui48 EUI-48 address
  214.  * @return false|string EUI-64 address
  215.  */
  216. function eui48_to_eui64(string $eui48) {
  217.         // Note: MAC-48 is used for network hardware; EUI-48 is used to identify other devices and software.
  218.         //       EUI48-to-EUI64 Encapsulation uses 0xFFFF middle part
  219.         if (!mac_valid($eui48)) return false;
  220.         $eui48 = mac_canonize($eui48, '');
  221.         if (eui_bits($eui48) == 64) return mac_canonize($eui48);
  222.         if (($eui48[1] != '0') && ($eui48[1] != '4') && ($eui48[1] != '8') && ($eui48[1] != 'C')) return false; // only allow EUI
  223.  
  224.         $eui64 = substr($eui48, 0, 6).'FFFE'.substr($eui48, 6, 6);
  225.         return mac_canonize($eui64);
  226. }
  227.  
  228. /**
  229.  * MAC/EUI-48 to Modified EUI-64 Encapsulation
  230.  * @param string $eui48 MAC-48 or EUI-48 address
  231.  * @return false|string Modified EUI-64 address
  232.  */
  233. function maceui48_to_modeui64(string $eui48) {
  234.         // Note: MAC-48 is used for network hardware; EUI-48 is used to identify other devices and software.
  235.         //       EUI48-to-ModifiedEUI64 Encapsulation uses 0xFFFE middle part (SIC! This was a mistake by IETF, since it should actually be 0xFFFF!)
  236.         if (!mac_valid($eui48)) return false;
  237.         $eui48 = mac_canonize($eui48, '');
  238.         if (eui_bits($eui48) == 64) return mac_canonize($eui48);
  239.         if (($eui48[1] != '0') && ($eui48[1] != '4') && ($eui48[1] != '8') && ($eui48[1] != 'C')) return false; // only allow EUI
  240.  
  241.         $eui64 = substr($eui48, 0, 6).'FFFE'.substr($eui48, 6, 6);
  242.  
  243.         $eui64[1] = dechex(hexdec($eui64[1]) | 2); // flip seventh bit
  244.  
  245.         return mac_canonize($eui64);
  246. }
  247.  
  248. /**
  249.  * Try to convert IPv6-Link-Local address to MAC-48
  250.  * @param string $ipv6 IPv6-Link-Local address
  251.  * @return false|string MAC-48 (or IPv6 if it was no LinkLocal address, or Modified EUI-64 if it decapsulation failed)
  252.  */
  253. function ipv6linklocal_to_mac48(string $ipv6) {
  254.         // https://stackoverflow.com/questions/12095835/quick-way-of-expanding-ipv6-addresses-with-php (modified)
  255.         $tmp = @inet_pton($ipv6);
  256.         if ($tmp === false) return false;
  257.         $hex = unpack("H*hex", $tmp);
  258.         $ipv6 = substr(preg_replace("/([A-f0-9]{4})/", "$1:", $hex['hex']), 0, -1);
  259.  
  260.         // Remove "fe80::" to convert IPv6-Link-Local address back to EUI-64
  261.         // see https://support.lenovo.com/de/de/solutions/ht509925-how-to-convert-a-mac-address-into-an-ipv6-link-local-address-eui-64
  262.         $cnt = 0;
  263.         $mac = preg_replace('@^fe80:0000:0000:0000:@i', '', $ipv6, -1, $cnt);
  264.         if ($cnt == 0) return false;
  265.  
  266.         // Set LAA to UAA again
  267.         $mac_uaa_64 = $mac;
  268.         $mac_uaa_64[1] = dechex(hexdec($mac_uaa_64[1]) & 253);
  269.  
  270.         $mac_uaa_48 = eui64_to_eui48($mac_uaa_64);
  271.         if (eui_bits($mac_uaa_48) == 48) {
  272.                 return $mac_uaa_48; // Output MAC-48 (UAA)
  273.         } else {
  274.                 return $mac; // Failed decapsulation; output Modified EUI-64 instead
  275.         }
  276. }
  277.  
  278. /**
  279.  * Converts MAC-48 or EUI-48 to IPv6-Link-Local (based on Modified EUI-64)
  280.  * @param string $mac
  281.  * @return false|string
  282.  */
  283. function maceui_to_ipv6linklocal(string $mac) {
  284.         if (!mac_valid($mac)) return false;
  285.         if (eui_bits($mac) == 48) {
  286.                 $mac = maceui48_to_modeui64($mac);
  287.         }
  288.         $mac = mac_canonize($mac, '');
  289.         $mac = str_pad($mac, 16, '0', STR_PAD_LEFT);
  290.         return strtolower('fe80::'.substr($mac,0, 4).':'.substr($mac,4, 4).':'.substr($mac,8, 4).':'.substr($mac,12, 4));
  291. }
  292.  
  293. /**
  294.  * @param string $mac
  295.  * @return string
  296.  * @throws Exception
  297.  */
  298. function mac_type(string $mac): string {
  299.         // Format MAC for machine readability
  300.         $mac = mac_canonize($mac, '');
  301.  
  302.         /*
  303.          *
  304.          *      ZYXM
  305.          * 0    0000    EUI (OUI)
  306.          * 1    0001    [Multicast]
  307.          * 2    0010    AAI
  308.          * 3    0011    [Multicast]
  309.          * 4    0100    EUI (OUI)
  310.          * 5    0101    [Multicast]
  311.          * 6    0110    Reserved
  312.          * 7    0111    [Multicast]
  313.          * 8    1000    EUI (OUI)
  314.          * 9    1001    [Multicast]
  315.          * A    1010    ELI (CID)
  316.          * B    1011    [Multicast]
  317.          * C    1100    EUI (OUI)
  318.          * D    1101    [Multicast]
  319.          * E    1110    SAI
  320.          * F    1111    [Multicast]
  321.          *
  322.          */
  323.  
  324.         $type = '';
  325.         $tmp = ipv6linklocal_to_mac48($mac);
  326.         if ($tmp !== false) {
  327.                 $mac = $tmp;
  328.                 $type = 'IPv6-Link-Local';
  329.         }
  330.         if (!mac_valid($mac)) throw new Exception("Invalid MAC address");
  331.         if ($tmp === false) {
  332.                 if (($mac[1] == '2') || ($mac[1] == '3')) {
  333.                         /*
  334.                          * AAI: Administratively Assigned Identifier
  335.                          * Administrators who wish to assign local MAC addresses in an
  336.                          * arbitrary fashion (for example, randomly) and yet maintain
  337.                          * compatibility with other assignment protocols operating under the
  338.                          * SLAP on the same LAN may assign a local MAC address as AAI.
  339.                          */
  340.                         $type = 'AAI-' . eui_bits($mac).' (Administratively Assigned Identifier)';
  341.                 } else if (($mac[1] == '6') || ($mac[1] == '7')) {
  342.                         /*
  343.                          * Reserved
  344.                          * may be administratively used and assigned in accordance with the
  345.                          * considerations specified for AAI usage, without effect on SLAP
  346.                          * assignments. However, administrators should be cognizant of
  347.                          * possible future specifications… that would render administrative
  348.                          * assignment incompatible with the SLAP.
  349.                          */
  350.                         $type = 'Reserved-' . eui_bits($mac);
  351.                 } else if (($mac[1] == 'A') || ($mac[1] == 'B')) {
  352.                         /*
  353.                          * ELI: Extended Local Identifier
  354.                          * An ELI is based on a 24 bit CID
  355.                          * A CID has ZYXM bits set to 1010 (0b1010 = 0xA)
  356.                          * Since X=1 (U/L=1), the CID cannot be used to form a universal UAA MAC (only a local LAA MAC)
  357.                          */
  358.                         $type = 'ELI-' . eui_bits($mac).' (Extended Local Identifier)';
  359.                 } else if (($mac[1] == 'E') || ($mac[1] == 'F')) {
  360.                         /*
  361.                          * SAI: Standard Assigned Identifier
  362.                          * Specification of the use of the SAI quadrant for SLAP address
  363.                          * assignments is reserved for the standard forthcoming from IEEE
  364.                          * P802.1CQ.
  365.                          * An SAI is assigned by a protocol specified in an IEEE 802 standard.
  366.                          * Multiple protocols for assigning SAI may be specified within various
  367.                          * IEEE 802 standards. Coexistence of such protocols may be supported
  368.                          * by restricting each to assignments within a subspace of SAI space.
  369.                          * In some cases, an SAI assignment protocol may assign the SAI to convey
  370.                          * specific information. Such information may be interpreted by receivers
  371.                          * and bridges that recognize the specific SAI assignment protocol, as
  372.                          * identified by the subspace of the SAI. The functionality of receivers
  373.                          * and bridges that do not recognize the protocol is not affected.
  374.                          */
  375.                         $type = 'SAI-' . eui_bits($mac).' (Standard Assigned Identifier)';
  376.                 } else {
  377.                         /*
  378.                          * Extended Unique Identifier
  379.                          * Based on an OUI-24, OUI-28, or OUI-36
  380.                          */
  381.                         if (eui_bits($mac) == 48) {
  382.                                 // The name "MAC-48" has been deprecated by IEEE
  383.                                 //$type = 'MAC-48 (network hardware) or EUI-48 (other devices and software)';
  384.                                 $type = 'EUI-48 (Extended Unique Identifier)';
  385.                         } else if (eui_bits($mac) == 64) {
  386.                                 if (substr($mac, 6, 4) == 'FFFE') {
  387.                                         if ((hexdec($mac[1]) & 2) == 2) {
  388.                                                 $type = 'EUI-64 (Extended Unique Identifier, MAC/EUI-48 to Modified EUI-64 Encapsulation)';
  389.                                         } else {
  390.                                                 $type = 'EUI-64 (Extended Unique Identifier, EUI-48 to EUI-64 Encapsulation)';
  391.                                         }
  392.                                 } else if (substr($mac, 6, 4) == 'FFFF') {
  393.                                         $type = 'EUI-64 (Extended Unique Identifier, MAC-48 to EUI-64 Encapsulation)';
  394.                                 } else {
  395.                                         $type = 'EUI-64 (Extended Unique Identifier)';
  396.                                 }
  397.                         } else {
  398.                                 assert(false); /** @phpstan-ignore-line */
  399.                         }
  400.                 }
  401.         }
  402.  
  403.         if ((hexdec($mac[1])&1) == 1) {
  404.                 // see also https://networkengineering.stackexchange.com/questions/83121/can-eli-aai-sai-addresses-be-multicast
  405.  
  406.                 /* https://standards.ieee.org/wp-content/uploads/import/documents/tutorials/eui.pdf writes:
  407.                  * - The assignee of an OUI or OUI-36 is exclusively authorized to assign group
  408.                  *   MAC addresses, with I/G=1, by extending a modified version of the assigned
  409.                  *   OUI or OUI-36 in which the M bit is set to 1. Such addresses are not EUIs and
  410.                  *   do not globally identify hardware instances, even though U/L=0.
  411.                  * - The assignee of a CID may assign local group MAC addresses by extending a modified version of
  412.                  *   the assigned CID by setting the M bit to 1 (so that I/G=1). The resulting
  413.                  *   extended identifier is an ELI.
  414.                  */
  415.  
  416.                 // TODO: If "Multicast EUI" is not an EUI (as tutorials/eui.pdf states), how should we name it instead?!
  417.                 $type = "Multicast $type";
  418.         }
  419.  
  420.         return $type;
  421. }
  422.  
  423. /**
  424.  * Prints information about an IPv6-Link-Local address, MAC, EUI, ELI, AAI, or SAI.
  425.  * @param string $mac IPv6-Link-Local address, MAC, EUI, ELI, AAI, or SAI
  426.  * @return void
  427.  * @throws Exception
  428.  */
  429. function decode_mac(string $mac) {
  430.  
  431.         // TODO: Should we decode Multicast MAC to its IP (see https://ipcisco.com/lesson/multicast-mac-addresses/)?
  432.  
  433.         echo sprintf("%-32s %s\n", "Input:", $mac);
  434.  
  435.         // Format MAC for machine readability
  436.         $mac = mac_canonize($mac, '');
  437.  
  438.         $type = mac_type($mac);
  439.         echo sprintf("%-32s %s\n", "Type:", $type);
  440.  
  441.         echo "\n";
  442.  
  443.         $is_eli_unicast = (hexdec($mac[1]) & 0xF) == 0xA;  // ELI = 1010 (unicast)
  444.         $is_eli         = (hexdec($mac[1]) & 0xE) == 0xA;  // ELI = 101x (unicast and multicast)
  445.  
  446.         $is_eui_unicast = (hexdec($mac[1]) & 0x3) == 0x0;  // EUI = xx00 (unicast)
  447.         $is_eui         = (hexdec($mac[1]) & 0x2) == 0x0;  // EUI = xx0x (unicast and multicast)
  448.  
  449.         // Show various representations
  450.         if ($is_eli) {
  451.                 // Note: There does not seem to exist an algorithm for encapsulating/converting ELI-48 <=> ELI-64
  452.                 echo sprintf("%-32s %s\n", "ELI-".eui_bits($mac).":", mac_canonize($mac));
  453.                 $mac48 = eui64_to_eui48($mac);
  454.                 echo sprintf("%-32s %s\n", "MAC-48 (Local):", (eui_bits($mac48) != 48) ? 'Not available' : $mac48);
  455.         } else if ($is_eui) {
  456.                 $eui48 = eui64_to_eui48($mac);
  457.                 echo sprintf("%-32s %s\n", "EUI-48 or MAC-48:", (eui_bits($eui48) != 48) ? 'Not available' : $eui48);
  458.                 if (eui_bits($mac) == 48) {
  459.                         $eui64 = mac48_to_eui64($mac);
  460.                         echo sprintf("%-32s %s\n", "EUI-64:", ((eui_bits($eui64) != 64) ? 'Not available' : $eui64).' (MAC-48 to EUI-64 Encapsulation)');
  461.                         $eui64 = eui48_to_eui64($mac);
  462.                         echo sprintf("%-32s %s\n", "", ((eui_bits($eui64) != 64) ? 'Not available' : $eui64).' (EUI-48 to EUI-64 Encapsulation)');
  463.                         $eui64 = maceui48_to_modeui64($mac);
  464.                         echo sprintf("%-32s %s\n", "", ((eui_bits($eui64) != 64) ? 'Not available' : $eui64).' (MAC/EUI-48 to Modified EUI-64 Encapsulation)');
  465.                         $ipv6 = maceui_to_ipv6linklocal($mac);
  466.                         echo sprintf("%-32s %s\n", "IPv6-Link-Local address:", $ipv6);
  467.                 } else {
  468.                         $eui64 = mac_canonize($mac);
  469.                         echo sprintf("%-32s %s\n", "EUI-64:", $eui64);
  470.                 }
  471.         }
  472.  
  473.         // Vergabestelle
  474.         $ul = hexdec($mac[1]) & 2; // Bit #LSB+1 of Byte 1
  475.         $ul_ = ($ul == 0) ? '[0] Universally Administered Address (UAA)' : '[1] Locally Administered Address (LAA)';
  476.         echo sprintf("%-32s %s\n", "Administration type (U/L flag):", $ul_);
  477.  
  478.         // Empfaengergruppe
  479.         $ig = hexdec($mac[1]) & 1; // Bit #LSB+0 of Byte 1
  480.         $ig_ = ($ig == 0) ? '[0] Unicast (Individual)' : '[1] Multicast (Group)';
  481.         echo sprintf("%-32s %s\n", "Transmission type (I/G flag):", $ig_);
  482.  
  483.         // Query IEEE registries
  484.         if (count(glob(IEEE_MAC_REGISTRY.DIRECTORY_SEPARATOR.'*.txt')) > 0) {
  485.                 $alt_mac = $mac;
  486.                 $alt_mac[1] = dechex(hexdec($alt_mac[1])^1); // switch Unicast<=>Multicast in order to find the vendor
  487.  
  488.                 if (is_dir(IEEE_MAC_REGISTRY)) {
  489.                         if ($is_eli) {
  490.                                 // Query the CID registry
  491.                                 if (
  492.                                         ($x = _lookup_ieee_registry(IEEE_MAC_REGISTRY . DIRECTORY_SEPARATOR . 'cid.txt', 'CID', $mac)) ||
  493.                                         ($x = _lookup_ieee_registry(IEEE_MAC_REGISTRY . DIRECTORY_SEPARATOR . 'cid.txt', 'CID', $alt_mac))
  494.                                 ) {
  495.                                         echo "\n";
  496.                                         echo $x;
  497.                                 } else {
  498.                                         $registry_name = 'CID';
  499.                                         echo "\n";
  500.                                         echo sprintf("%-32s 0x%s\n", "IEEE $registry_name:", substr($mac, 0, 6));
  501.                                         echo sprintf("%-32s 0x%s\n", "Vendor-specific part:", substr($mac, 6));
  502.                                         echo sprintf("%-32s %s\n", "Registrant:", "$registry_name not found in database");
  503.                                 }
  504.                         } else if ($is_eui) {
  505.                                 // Query the OUI registries
  506.                                 if (
  507.                                         # The IEEE Registration Authority distinguishes between IABs and OUI-36 values. Both are 36-bit values which may be used to generate EUI-48 values, but IABs may not be used to generate EUI-64 values.[6]
  508.                                         # Note: The Individual Address Block (IAB) is an inactive registry activity, which has been replaced by the MA-S registry product as of January 1, 2014.
  509.                                         ($x = _lookup_ieee_registry(IEEE_MAC_REGISTRY . DIRECTORY_SEPARATOR . 'iab.txt', 'IAB', $mac)) ||
  510.                                         ($x = _lookup_ieee_registry(IEEE_MAC_REGISTRY . DIRECTORY_SEPARATOR . 'oui36.txt', 'OUI-36 (MA-S)', $mac)) ||
  511.                                         ($x = _lookup_ieee_registry(IEEE_MAC_REGISTRY . DIRECTORY_SEPARATOR . 'mam.txt', '28 bit identifier (MA-M)', $mac)) ||
  512.                                         ($x = _lookup_ieee_registry(IEEE_MAC_REGISTRY . DIRECTORY_SEPARATOR . 'oui.txt', 'OUI (MA-L)', $mac)) ||
  513.                                         ($x = _lookup_ieee_registry(IEEE_MAC_REGISTRY . DIRECTORY_SEPARATOR . 'iab.txt', 'IAB', $alt_mac)) ||
  514.                                         ($x = _lookup_ieee_registry(IEEE_MAC_REGISTRY . DIRECTORY_SEPARATOR . 'oui36.txt', 'OUI-36 (MA-S)', $alt_mac)) ||
  515.                                         ($x = _lookup_ieee_registry(IEEE_MAC_REGISTRY . DIRECTORY_SEPARATOR . 'mam.txt', '28 bit identifier (MA-M)', $alt_mac)) ||
  516.                                         ($x = _lookup_ieee_registry(IEEE_MAC_REGISTRY . DIRECTORY_SEPARATOR . 'oui.txt', 'OUI (MA-L)', $alt_mac))
  517.                                 ) {
  518.                                         echo "\n";
  519.                                         echo $x;
  520.                                 } else {
  521.                                         $registry_name = 'OUI (MA-L)?';
  522.                                         echo "\n";
  523.                                         echo sprintf("%-32s 0x%s\n", "IEEE $registry_name:", substr($mac, 0, 6));
  524.                                         echo sprintf("%-32s 0x%s\n", "Vendor-specific part:", substr($mac, 6));
  525.                                         echo sprintf("%-32s %s\n", "Registrant:", "$registry_name not found in database");
  526.  
  527.                                         $registry_name = '28 bit identifier (MA-M)?';
  528.                                         echo "\n";
  529.                                         echo sprintf("%-32s 0x%s\n", "IEEE $registry_name:", substr($mac, 0, 7));
  530.                                         echo sprintf("%-32s 0x%s\n", "Vendor-specific part:", substr($mac, 7));
  531.                                         echo sprintf("%-32s %s\n", "Registrant:", "$registry_name not found in database");
  532.  
  533.                                         $registry_name = 'OUI-36 (MA-S)?';
  534.                                         echo "\n";
  535.                                         echo sprintf("%-32s 0x%s\n", "IEEE $registry_name:", substr($mac, 0, 9));
  536.                                         echo sprintf("%-32s 0x%s\n", "Vendor-specific part:", substr($mac, 9));
  537.                                         echo sprintf("%-32s %s\n", "Registrant:", "$registry_name not found in database");
  538.                                 }
  539.                         }
  540.                 }
  541.         }
  542.  
  543.         $vm = '';
  544.         // === FAQ "Detection rules which don't have their dedicated page yet" ===
  545.         // https://wiki.xenproject.org/wiki/Xen_Networking
  546.         // https://mcpmag.com/articles/2007/11/27/hey-vm-whats-your-hypervisor.aspx
  547.         // https://www.techrepublic.com/blog/data-center/mac-address-scorecard-for-common-virtual-machine-platforms
  548.         if (mac_between($mac, '00:16:3E:00:00:00', '00:16:3E:FF:FF:FF')) $vm = "Red Hat Xen, XenSource, Novell Xen";
  549.         // http://techgenix.com/mac-address-pool-duplication-hyper-v/
  550.         // https://docs.microsoft.com/en-us/system-center/vmm/network-mac?view=sc-vmm-1807
  551.         // https://blogs.technet.microsoft.com/gbanin/2014/08/27/how-to-solve-mac-address-conflict-on-hyper-v/
  552.         if (mac_between($mac, '00:1D:D8:B7:1C:00', '00:1D:D8:F4:1F:FF')) $vm = "Microsoft SCVMM (System Center Virtual Machine Manager)";
  553.         // https://mcpmag.com/articles/2007/11/27/hey-vm-whats-your-hypervisor.aspx
  554.         // https://www.techrepublic.com/blog/data-center/mac-address-scorecard-for-common-virtual-machine-platforms/
  555.         // https://blogs.technet.microsoft.com/medv/2011/01/24/how-to-manage-vm-mac-addresses-with-the-globalimagedata-xml-file-in-med-v-v1/
  556.         if (mac_between($mac, '00:03:FF:00:00:00', '00:03:FF:FF:FF:FF')) $vm = "Microsoft Virtual PC / Virtual Server";
  557.         // https://mcpmag.com/articles/2007/11/27/hey-vm-whats-your-hypervisor.aspx
  558.         if (mac_between($mac, '00:18:51:00:00:00', '00:18:51:FF:FF:FF')) $vm = "SWsoft";
  559.         // https://macaddress.io/statistics/company/17619
  560.         if (mac_between($mac, '58:9C:FC:00:00:00', '58:9C:FC:FF:FF:FF')) $vm = "bhyve by FreebsdF";
  561.         // https://macaddress.io/statistics/company/17388
  562.         if (mac_between($mac, '50:6B:8D:00:00:00', '50:6B:8D:FF:FF:FF')) $vm = "Nutanix AHV";
  563.         // https://www.centos.org/forums/viewtopic.php?t=26739
  564.         if (mac_between($mac, '54:52:00:00:00:00', '54:52:FF:FF:FF:FF')) $vm = "KVM (proxmox)";
  565.         // Self tested (alldatafeeds.com)
  566.         if (mac_between($mac, '96:00:00:00:00:00', '96:00:FF:FF:FF:FF')) $vm = "Hetzner vServer (based on KVM and libvirt)";
  567.         // === FAQ "How to recognise a VMware's virtual machine by its MAC address?" ===
  568.         if (mac_between($mac, '00:50:56:00:00:00', '00:50:56:FF:FF:FF')) $vm = "VMware vSphere, VMware Workstation, VMware ESX Server";
  569.         if (mac_between($mac, '00:50:56:80:00:00', '00:50:56:BF:FF:FF')) $vm = "VMware vSphere managed by vCenter Server";
  570.         if (mac_between($mac, '00:0C:29:00:00:00', '00:0C:29:FF:FF:FF')) $vm = "VMWare Standalone VMware vSphere, VMware Workstation, VMware Horizon";
  571.         if (mac_between($mac, '00:05:69:00:00:00', '00:05:69:FF:FF:FF')) $vm = "VMware ESX, VMware GSX Server";
  572.         if (mac_between($mac, '00:1C:14:00:00:00', '00:1C:14:FF:FF:FF')) $vm = "VMWare";
  573.         // === FAQ "machine by its MAC address?" ===
  574.         if (mac_between($mac, '00:1C:42:00:00:00', '00:1C:42:FF:FF:FF')) $vm = "Parallels Virtual Machine";
  575.         // === FAQ "How to recognise a Docker container by its MAC address?" ===
  576.         if (mac_between($mac, '02:42:00:00:00:00', '02:42:FF:FF:FF:FF')) $vm = "Docker container";
  577.         // === FAQ =How to recognise a Microsoft Hyper-V's virtual machine by its MAC address?" ===
  578.         if (mac_between($mac, '00:15:5D:00:00:00', '00:15:5D:FF:FF:FF')) $vm = "Microsoft Hyper-V";
  579.         // === FAQ "How to recognise an Oracle Virtual machine by its MAC address?" ===
  580.         if (mac_between($mac, '08:00:27:00:00:00', '08:00:27:FF:FF:FF')) $vm = "Oracle VirtualBox 5.2"; // Pcs Systemtechnik GmbH
  581.         if (mac_between($mac, '52:54:00:00:00:00', '52:54:00:FF:FF:FF')) $vm = "Oracle VirtualBox 5.2 + Vagrant"; // 52:54:00 (Exact MAC: 52:54:00:C9:C7:04)
  582.         if (mac_between($mac, '00:21:F6:00:00:00', '00:21:F6:FF:FF:FF')) $vm = "Oracle VirtualBox 3.3";
  583.         if (mac_between($mac, '00:14:4F:00:00:00', '00:14:4F:FF:FF:FF')) $vm = "Oracle VM Server for SPARC";
  584.         if (mac_between($mac, '00:0F:4B:00:00:00', '00:0F:4B:FF:FF:FF')) $vm = "Oracle Virtual Iron 4";
  585.  
  586.         if ($vm) {
  587.                 echo sprintf("%-32s %s\n", "Special use:", "Virtual machine $vm");
  588.         }
  589.  
  590.         $app = '';
  591.  
  592.         // === FAQ "Other MAC address applications"
  593.         // http://www.cavebear.com/archive/cavebear/Ethernet/Ethernet.txt
  594.         // https://tools.ietf.org/html/rfc1060
  595.         if (mac_between($mac, '03:00:00:01:00:00', '03:00:40:00:00:00')) $app = 'User-defined (per 802 spec), EtherType is 0x0802';
  596.         if (mac_equals($mac, '01:00:1D:00:00:00')) $app = 'Cabletron PC-OV PC discover (on demand), EtherType is 0x0802';
  597.         if (mac_equals($mac, '01:00:1D:42:00:00')) $app = 'Cabletron PC-OV Bridge discover (on demand), EtherType is 0x0802';
  598.         if (mac_equals($mac, '01:00:1D:52:00:00')) $app = 'Cabletron PC-OV MMAC discover (on demand), EtherType is 0x0802';
  599.         if (mac_between($mac, '01:00:3C:00:00:00' , '01:00:3C:FF:FF:FF')) $app = 'Auspex Systems (Serverguard)';
  600.         if (mac_equals($mac, '01:00:10:00:00:20')) $app = 'Hughes Lan Systems Terminal Server S/W download, EtherType is 0x0802';
  601.         if (mac_equals($mac, '01:00:10:FF:FF:20')) $app = 'Hughes Lan Systems Terminal Server S/W request, EtherType is 0x0802';
  602.         if (mac_equals($mac, '01:00:81:00:00:00')) $app = 'Synoptics Network Management';
  603.         if (mac_equals($mac, '01:00:81:00:00:02')) $app = 'Synoptics Network Management';
  604.         if (mac_equals($mac, '01:00:81:00:01:00')) $app = 'Bay Networks (Synoptics) autodiscovery, EtherType is 0x0802 SNAP type is 0x01A2';
  605.         if (mac_equals($mac, '01:00:81:00:01:01')) $app = 'Bay Networks (Synoptics) autodiscovery, EtherType is 0x0802 SNAP type is 0x01A1';
  606.         if (mac_between($mac, '01:20:25:00:00:00', '01:20:25:7F:FF:FF')) $app = 'Control Technology Inc\'s Industrial Ctrl Proto., EtherType is 0x873A';
  607.         if (mac_equals($mac, '01:80:24:00:00:00')) $app = 'Kalpana Etherswitch every 60 seconds, EtherType is 0x0802';
  608.         if (mac_equals($mac, '01:DD:00:FF:FF:FF')) $app = 'Ungermann-Bass boot-me requests, EtherType is 0x7002';
  609.         if (mac_equals($mac, '01:DD:01:00:00:00')) $app = 'Ungermann-Bass Spanning Tree, EtherType is 0x7005';
  610.         if (mac_equals($mac, '03:00:00:00:00:10')) $app = 'OS/2 1.3 EE + Communications Manager, EtherType is 0x80D5';
  611.         if (mac_equals($mac, '03:00:00:00:00:40')) $app = 'OS/2 1.3 EE + Communications Manager, EtherType is 0x80D5';
  612.         if (mac_equals($mac, '03:00:00:00:01:00')) $app = 'OSI All-IS Multicast, EtherType is 0x0802';
  613.         if (mac_equals($mac, '03:00:00:00:02:00')) $app = 'OSI All-ES Multicast, EtherType is 0x0802';
  614.         if (mac_equals($mac, '03:00:00:80:00:00')) $app = 'Discovery Client, EtherType is 0x0802';
  615.         if (mac_equals($mac, '03:00:FF:FF:FF:FF')) $app = 'All Stations address, EtherType is 0x0802';
  616.         if (mac_between($mac, '09:00:0D:00:00:00', '09:00:0D:FF:FF:FF')) $app = 'ICL Oslan Multicast, EtherType is 0x0802';
  617.         if (mac_equals($mac, '09:00:0D:02:00:00')) $app = 'ICL Oslan Service discover only on boot';
  618.         if (mac_equals($mac, '09:00:0D:02:0A:3C')) $app = 'ICL Oslan Service discover only on boot';
  619.         if (mac_equals($mac, '09:00:0D:02:0A:38')) $app = 'ICL Oslan Service discover only on boot';
  620.         if (mac_equals($mac, '09:00:0D:02:0A:39')) $app = 'ICL Oslan Service discover only on boot';
  621.         if (mac_equals($mac, '09:00:0D:02:FF:FF')) $app = 'ICL Oslan Service discover only on boot';
  622.         if (mac_equals($mac, '09:00:0D:09:00:00')) $app = 'ICL Oslan Service discover as required';
  623.         if (mac_equals($mac, '09:00:1E:00:00:00')) $app = 'Apollo DOMAIN, EtherType is 0x8019';
  624.         if (mac_equals($mac, '09:00:02:04:00:01')) $app = 'Vitalink printer messages, EtherType is 0x8080';
  625.         if (mac_equals($mac, '09:00:02:04:00:02')) $app = 'Vitalink bridge management, EtherType is 0x8080';
  626.         if (mac_equals($mac, '09:00:4C:00:00:0F')) $app = 'BICC Remote bridge adaptive routing (e.g. to Retix), EtherType is 0x0802';
  627.         if (mac_equals($mac, '09:00:4E:00:00:02')) $app = 'Novell IPX, EtherType is 0x8137';
  628.         if (mac_equals($mac, '09:00:6A:00:01:00')) $app = 'TOP NetBIOS';
  629.         if (mac_equals($mac, '09:00:7C:01:00:01')) $app = 'Vitalink DLS Multicast';
  630.         if (mac_equals($mac, '09:00:7C:01:00:03')) $app = 'Vitalink DLS Inlink';
  631.         if (mac_equals($mac, '09:00:7C:01:00:04')) $app = 'Vitalink DLS and non DLS Multicast';
  632.         if (mac_equals($mac, '09:00:7C:02:00:05')) $app = 'Vitalink diagnostics, EtherType is 0x8080';
  633.         if (mac_equals($mac, '09:00:7C:05:00:01')) $app = 'Vitalink gateway, EtherType is 0x8080';
  634.         if (mac_equals($mac, '09:00:7C:05:00:02')) $app = 'Vitalink Network Validation Message';
  635.         if (mac_equals($mac, '09:00:09:00:00:01')) $app = 'HP Probe, EtherType is 0x8005 or 0x0802';
  636.         if (mac_equals($mac, '09:00:09:00:00:04')) $app = 'HP DTC, EtherType is 0x8005';
  637.         if (mac_equals($mac, '09:00:26:01:00:01')) $app = 'Vitalink TransLAN bridge management, EtherType is 0x8038';
  638.         if (mac_equals($mac, '09:00:39:00:70:00')) $app = 'Spider Systems Bridge';
  639.         if (mac_between($mac, '09:00:56:00:00:00', '09:00:56:FE:FF:FF')) $app = 'Stanford reserved';
  640.         if (mac_between($mac, '09:00:56:FF:00:00', '09:00:56:FF:FF:FF')) $app = 'Stanford V Kernel, version 6.0, EtherType is 0x805C';
  641.         if (mac_equals($mac, '09:00:77:00:00:00')) $app = 'Retix Bridge Local Management System, EtherType is 0x0802';
  642.         if (mac_equals($mac, '09:00:77:00:00:01')) $app = 'Retix spanning tree bridges, EtherType is 0x0802';
  643.         if (mac_equals($mac, '09:00:77:00:00:02')) $app = 'Retix Bridge Adaptive routing, EtherType is 0x0802';
  644.         if (mac_equals($mac, '09:00:87:80:FF:FF')) $app = 'Xyplex Terminal Servers, EtherType is 0x0889';
  645.         if (mac_equals($mac, '09:00:87:90:FF:FF')) $app = 'Xyplex Terminal Servers, EtherType is 0x0889';
  646.         if (mac_between($mac, '44:38:39:FF:00:00', '44:38:39:FF:FF:FF')) $app = 'Multi-Chassis Link Aggregation (Cumulus Linux)';
  647.         if (mac_equals($mac, 'FF:FF:00:40:00:01')) $app = 'LANtastic, EtherType is 0x81D6';
  648.         if (mac_equals($mac, 'FF:FF:00:60:00:04')) $app = 'LANtastic, EtherType is 0x81D6';
  649.         if (mac_equals($mac, 'FF:FF:01:E0:00:04')) $app = 'LANtastic';
  650.  
  651.         // === FAQ "The "CF" series MAC addresses" ===
  652.         // https://www.iana.org/assignments/ppp-numbers/ppp-numbers.xhtml
  653.         // https://tools.ietf.org/html/rfc2153
  654.         // https://tools.ietf.org/html/rfc7042#section-2.3.2
  655.         if (mac_between($mac, 'CF:00:00:00:00:00', 'CF:00:00:FF:FF:FF')) $app = 'Reserved';
  656.         if (mac_equals($mac, 'CF:00:00:00:00:00')) $app = 'Used for Ethernet loopback tests';
  657.  
  658.         // === FAQ "How to recognise a Broadcast MAC address application?" ===
  659.         // According to https://standards.ieee.org/wp-content/uploads/import/documents/tutorials/eui.pdf FFFFFFFFFFFF can be used as NULL EUI
  660.         if (mac_equals($mac, 'FF:FF:FF:FF:FF:FF')) echo sprintf("%-32s %s\n", "Special use:", "Broadcast messaging or Null-EUI");
  661.  
  662.         // === FAQ "How to recognise a Virtual Router ID by MAC address?" ===
  663.         // https://tools.ietf.org/html/rfc7042#section-5.1
  664.         // https://tools.ietf.org/html/rfc5798
  665.         if (mac_between($mac, '00:00:5E:00:01:00', '00:00:5E:00:01:FF')) $app = 'IPv4 Virtual Router Redundancy Protocol  (VRRP)';
  666.         if (mac_between($mac, '00:00:5E:00:02:00', '00:00:5E:00:02:FF')) $app = 'IPv6 Virtual Router Redundancy Protocol';
  667.  
  668.         // === FAQ "How to recognise an IP frame by MAC address?" ===
  669.         // https://tools.ietf.org/html/rfc1060
  670.         // https://en.wikipedia.org/wiki/Multicast_address#cite_note-15
  671.         // https://tools.ietf.org/html/rfc2464
  672.         // https://www.iana.org/go/rfc1112
  673.         // http://www.cavebear.com/archive/cavebear/Ethernet/Ethernet.txt
  674.         if (mac_between($mac, '01:00:5E:00:00:00', '01:00:5E:7F:FF:FF')) $app = 'IPv4 Multicast (EtherType is 0x0800)';
  675.         if (mac_between($mac, '33:33:00:00:00:00', '33:33:FF:FF:FF:FF')) $app = 'IPv6 Multicast. IPv6 neighbor discovery (EtherType is 0x86DD)'; // TODO: Dabei werden die untersten 32 Bit der IPv6-Multicast-Adresse in die MAC-Adresse eingebettet.
  676.         if (mac_between($mac, '00:00:5E:00:52:13', '00:00:5E:00:52:13')) $app = 'Proxy Mobile IPv6';
  677.         if (mac_between($mac, '00:00:5E:FE:C0:00:02:00', '00:00:5E:FE:C0:00:02:FF')) $app = 'IPv4 derived documentation';
  678.         if (mac_between($mac, '00:00:5E:FE:C6:33:64:00', '00:00:5E:FE:C6:33:64:FF')) $app = 'IPv4 derived documentation';
  679.         if (mac_between($mac, '00:00:5E:FE:CB:00:71:00', '00:00:5E:FE:CB:00:71:FF')) $app = 'IPv4 derived documentation';
  680.         if (mac_equals($mac, '00:00:5E:FE:EA:C0:00:02')) $app = 'IPv4 multicast derived documentation';
  681.         if (mac_equals($mac, '00:00:5E:FE:EA:C6:33:64')) $app = 'IPv4 multicast derived documentation';
  682.         if (mac_equals($mac, '00:00:5E:FE:EA:CB:00:71')) $app = 'IPv4 multicast derived documentation';
  683.         if (mac_between($mac, '01:00:5E:FE:C0:00:02:00', '01:00:5E:FE:C0:00:02:FF')) $app = 'IPv4 derived documentation';
  684.         if (mac_between($mac, '01:00:5E:FE:C6:33:64:00', '01:00:5E:FE:C6:33:64:FF')) $app = 'IPv4 derived documentation';
  685.         if (mac_between($mac, '01:00:5E:FE:CB:00:71:00', '01:00:5E:FE:CB:00:71:FF')) $app = 'IPv4 derived documentation';
  686.         if (mac_equals($mac, '01:00:5E:FE:EA:C0:00:02')) $app = 'IPv4 multicast derived documentation';
  687.         if (mac_equals($mac, '01:00:5E:FE:EA:C6:33:64')) $app = 'IPv4 multicast derived documentation';
  688.         if (mac_equals($mac, '01:00:5E:FE:EA:CB:00:71')) $app = 'IPv4 multicast derived documentation';
  689.         if (mac_between($mac, '01:80:C2:00:00:20', '01:80:C2:00:00:2F')) $app = 'Reserved for use by Multiple Registration Protocol (MRP) applications';
  690.         if (mac_between($mac, '02:00:5E:FE:00:00:00:00', '02:00:5E:FE:FF:FF:FF:FF')) $app = 'IPv4 Addr Holders';
  691.         if (mac_equals($mac, '03:00:00:20:00:00')) $app = 'IP multicast address';
  692.         if (mac_equals($mac, 'C0:00:00:04:00:00')) $app = 'IP multicast address';
  693.         if (mac_between($mac, '03:00:5E:FE:00:00:00:00', '03:00:5E:FE:FF:FF:FF:FF')) $app = 'IPv4 Addr Holders';
  694.  
  695.         // === FAQ "How to recognise a MPLS multicast frame by MAC address?" ===
  696.         // http://www.iana.org/go/rfc5332
  697.         // http://www.iana.org/go/rfc7213
  698.         if (mac_between($mac, '01:00:5E:80:00:00', '01:00:5E:8F:FF:FF')) $app = 'MPLS multicast (EtherType is 0x8847 or 0x8848)';
  699.         if (mac_equals($mac, '01:00:5E:90:00:00')) $app = 'MPLS-TP p2p';
  700.  
  701.         // === FAQ "How to recognise a Bidirectional Forwarding Detection (BFD) on Link Aggregation Group (LAG) interfaces by MAC address?" ===
  702.         // http://www.iana.org/go/rfc7130
  703.         if (mac_equals($mac, '01:00:5E:90:00:01')) $app = 'Bidirectional Forwarding Detection (BFD) on Link Aggregation Group (LAG) interfaces';
  704.  
  705.         // === FAQ "How to recognise Token Ring specific functions by MAC address?" ===
  706.         // https://tools.ietf.org/html/rfc1060
  707.         // https://tools.ietf.org/html/rfc1469
  708.         // https://standards.ieee.org/products-services/regauth/grpmac/public.html
  709.         // https://tools.ietf.org/html/rfc2470
  710.         // http://www.cavebear.com/archive/cavebear/Ethernet/Ethernet.txt
  711.         if (mac_equals($mac, '03:00:00:00:00:01')) $app = 'NetBIOS (Token Ring)';
  712.         if (mac_equals($mac, '03:00:00:00:00:02')) $app = 'Locate - Directory Server (Token Ring)';
  713.         if (mac_equals($mac, '03:00:00:00:00:04')) $app = 'Synchronous Bandwidth Manager (Token Ring)';
  714.         if (mac_equals($mac, '03:00:00:00:00:08')) $app = 'Configuration Report Server (Token Ring)';
  715.         if (mac_equals($mac, '03:00:00:00:00:10')) $app = 'Ring Error Monitor (Token Ring)';
  716.         if (mac_equals($mac, '03:00:00:00:00:20')) $app = 'Network Server Heartbeat (Token Ring)';
  717.         if (mac_equals($mac, '03:00:00:00:00:40')) $app = 'Ring Parameter Monitor (Token Ring)';
  718.         if (mac_equals($mac, '03:00:00:00:00:80')) $app = 'Active Monitor (Token Ring)';
  719.         if (mac_equals($mac, '03:00:00:00:04:00')) $app = 'LAN Manager (Token Ring)';
  720.         if (mac_equals($mac, '03:00:00:00:08:00')) $app = 'Ring Wiring Concentrator (Token Ring)';
  721.         if (mac_equals($mac, '03:00:00:00:10:00')) $app = 'LAN Gateway (Token Ring)';
  722.         if (mac_equals($mac, '03:00:00:00:20:00')) $app = 'Ring Authorization Server (Token Ring)';
  723.         if (mac_equals($mac, '03:00:00:00:40:00')) $app = 'IMPL Server (Token Ring)';
  724.         if (mac_equals($mac, '03:00:00:00:80:00')) $app = 'Bridge (Token Ring)';
  725.         if (mac_equals($mac, '03:00:00:20:00:00')) $app = 'Single Token-Ring functional address';
  726.         if (mac_equals($mac, '03:00:00:00:00:08')) $app = 'Configuration Report Server (CRS) MAC Group address';
  727.         if (mac_equals($mac, '03:00:00:00:00:10')) $app = 'Ring Error Monitor (REM) MAC Group address';
  728.         if (mac_equals($mac, '03:00:00:00:00:40')) $app = 'Ring Parameter Server (RPS) MAC group address';
  729.         if (mac_equals($mac, '03:00:00:00:01:00')) $app = 'All Intermediate System Network Entities address';
  730.         if (mac_equals($mac, '03:00:00:00:02:00')) $app = 'All End System Network Entities address, and Lobe Media Test (LMT) MAC group address';
  731.         if (mac_equals($mac, '03:00:00:00:04:00')) $app = 'Generic address for all Manager Stations';
  732.         if (mac_equals($mac, '03:00:00:00:08:00')) $app = 'All CONs SNARES address';
  733.         if (mac_equals($mac, '03:00:00:00:10:00')) $app = 'All CONs End System address';
  734.         if (mac_equals($mac, '03:00:00:00:20:00')) $app = 'Loadable Device Generic address';
  735.         if (mac_equals($mac, '03:00:00:00:40:00')) $app = 'Load Server Generic address';
  736.         if (mac_equals($mac, '03:00:00:40:00:00')) $app = 'Generic address for all Agent Stations';
  737.         if (mac_equals($mac, 'C0:00:00:04:00:00')) $app = 'Single Token-Ring functional address';
  738.         if (mac_equals($mac, '03:00:80:00:00:00')) $app = 'IPv6 multicast over Token Ring: all-Nodes (FF01::1 and FF02::1) and solicited node (FF02:0:0:0:0:1:FFXX:XXXX) addresses';
  739.         if (mac_equals($mac, '03:00:40:00:00:00')) $app = 'IPv6 multicast over Token Ring: all-Routers addresses (FF0X::2)';
  740.         if (mac_equals($mac, '03:00:00:80:00:00')) $app = 'IPv6 multicast over Token Ring: any other multicast address with three least significant bits = 000';
  741.         if (mac_equals($mac, '03:00:00:40:00:00')) $app = 'IPv6 multicast over Token Ring: any other multicast address with three least significant bits = 001';
  742.         if (mac_equals($mac, '03:00:00:20:00:00')) $app = 'IPv6 multicast over Token Ring: any other multicast address with three least significant bits = 010';
  743.         if (mac_equals($mac, '03:00:00:10:00:00')) $app = 'IPv6 multicast over Token Ring: any other multicast address with three least significant bits = 011';
  744.         if (mac_equals($mac, '03:00:00:08:00:00')) $app = 'IPv6 multicast over Token Ring: any other multicast address with three least significant bits = 100';
  745.         if (mac_equals($mac, '03:00:00:04:00:00')) $app = 'IPv6 multicast over Token Ring: any other multicast address with three least significant bits = 101';
  746.         if (mac_equals($mac, '03:00:00:02:00:00')) $app = 'IPv6 multicast over Token Ring: any other multicast address with three least significant bits = 110';
  747.         if (mac_equals($mac, '03:00:00:01:00:00')) $app = 'IPv6 multicast over Token Ring: any other multicast address with three least significant bits = 111';
  748.  
  749.         // === FAQ "How to recognise an AppleTalk protocols by MAC address?" ===
  750.         // https://tools.ietf.org/html/rfc1060
  751.         // http://www.cavebear.com/archive/cavebear/Ethernet/Ethernet.txt
  752.         if (mac_between($mac, '09:00:07:00:00:00', '09:00:07:00:00:FC')) $app = 'AppleTalk zone multicast addresses (EtherType is 0x0802)';
  753.         if (mac_equals($mac, '09:00:07:FF:FF:FF')) $app = 'AppleTalk broadcast address (EtherType is 0x0802)';
  754.  
  755.         // === FAQ "How to recognise a TRILL protocols by MAC address?" ===
  756.         // http://www.iana.org/go/rfc7455
  757.         // https://tools.ietf.org/html/draft-ietf-trill-oam-framework-04
  758.         // https://standards.ieee.org/products-services/regauth/grpmac/public.html
  759.         // https://tools.ietf.org/html/rfc7455#appendix-C
  760.         if (mac_between($mac, '00:00:5E:90:01:00', '00:00:5E:90:01:00')) $app = 'TRILL OAM';
  761.         if (mac_equals($mac, '01:00:5E:90:01:00')) $app = 'TRILL OAM';
  762.         if (mac_between($mac, '01:80:C2:00:00:40', '01:80:C2:00:00:4F')) $app = 'Group MAC addresses used by the TRILL protocols';
  763.  
  764.         // === FAQ "How to recognise an IEEE 802.1X MAC address application?" ===
  765.         if (mac_between($mac, '01:0C:CD:01:00:00', '01:0C:CD:01:01:FF')) $app = 'IEC 61850-8-1 GOOSE Type 1/1A, EtherType is 0x88B8';
  766.         if (mac_between($mac, '01:0C:CD:02:00:00', '01:0C:CD:02:01:FF')) $app = 'GSSE (IEC 61850 8-1), EtherType is 0x88B9';
  767.         if (mac_between($mac, '01:0C:CD:04:00:00', '01:0C:CD:04:01:FF')) $app = 'Multicast sampled values (IEC 61850 8-1), EtherType is 0x88BA';
  768.         if (mac_equals($mac, '01:1B:19:00:00:00')) $app = 'General group address - An 802.1Q VLAN Bridge would forward the frame unchanged.';
  769.         if (mac_equals($mac, '01:1B:19:00:00:00')) $app = 'Precision Time Protocol (PTP) version 2 over Ethernet, EtherType is 0x88F7';
  770.         if (mac_equals($mac, '01:80:C2:00:00:00')) $app = 'Bridge Group address Nearest Customer Bridge group address';
  771.         if (mac_equals($mac, '01:80:C2:00:00:00')) $app = 'Spanning Tree Protocol (for bridges) IEEE 802.1D, EtherType is 0x0802';
  772.         if (mac_equals($mac, '01:80:C2:00:00:00')) $app = 'Link Layer Discovery Protocol, EtherType is 0x88CC';
  773.         if (mac_between($mac, '01:80:C2:00:00:00', '01:80:C2:00:00:0F')) $app = 'The initial bridging/link protocols block';
  774.         if (mac_between($mac, '01:80:C2:00:00:00', '01:80:C2:00:00:0F')) $app = 'IEEE 802.1D MAC Bridge Filtered MAC Group Addresses';
  775.         if (mac_between($mac, '01:80:C2:00:00:00', '01:80:C2:00:00:0F')) $app = 'IEEE Pause, 802.3x';
  776.         if (mac_equals($mac, '01:80:C2:00:00:0A')) $app = 'Reserved for future standardization';
  777.         if (mac_equals($mac, '01:80:C2:00:00:0B')) $app = 'EDE-SS PEP Address';
  778.         if (mac_equals($mac, '01:80:C2:00:00:0C')) $app = 'Reserved for future standardization';
  779.         if (mac_equals($mac, '01:80:C2:00:00:0D')) $app = 'Provider Bridge MVRP address';
  780.         if (mac_equals($mac, '01:80:C2:00:00:0E')) $app = 'Individual LAN Scope group address, It is intended that no IEEE 802.1 relay device will be defined that will forward frames that carry this destination address';
  781.         if (mac_equals($mac, '01:80:C2:00:00:0E')) $app = 'Nearest Bridge group address';
  782.         if (mac_equals($mac, '01:80:C2:00:00:0E')) $app = 'Link Layer Discovery Protocol, EtherType is 0x88CC';
  783.         if (mac_equals($mac, '01:80:C2:00:00:0E')) $app = 'Precision Time Protocol (PTP) version 2 over Ethernet, EtherType is 0x88F7';
  784.         if (mac_equals($mac, '01:80:C2:00:00:01')) $app = 'IEEE MAC-specific Control Protocols group address';
  785.         if (mac_equals($mac, '01:80:C2:00:00:01')) $app = 'Ethernet flow control (Pause frame) IEEE 802.3x, EtherType is 0x8808';
  786.         if (mac_equals($mac, '01:80:C2:00:00:1A')) $app = 'Generic Address for All Agent Stations';
  787.         if (mac_equals($mac, '01:80:C2:00:00:1B')) $app = 'All Multicast Capable End Systems address';
  788.         if (mac_equals($mac, '01:80:C2:00:00:1C')) $app = 'All Multicast Announcements address';
  789.         if (mac_equals($mac, '01:80:C2:00:00:1D')) $app = 'All Multicast Capable Intermediate Systems address';
  790.         if (mac_equals($mac, '01:80:C2:00:00:1E')) $app = 'All DTR Concentrators MAC group address';
  791.         if (mac_equals($mac, '01:80:C2:00:00:1F')) $app = 'EDE-CC PEP Address';
  792.         if (mac_between($mac, '01:80:C2:00:00:01', '01:80:C2:00:00:0F')) $app = '802.1 alternate Spanning multicast, EtherType is 0x0802';
  793.         if (mac_equals($mac, '01:80:C2:00:00:02')) $app = 'Ethernet OAM Protocol IEEE 802.3ah (also known as "slow protocols"), EtherType is 0x8809';
  794.         if (mac_equals($mac, '01:80:C2:00:00:03')) $app = 'Nearest non-TPMR Bridge group address IEEE Std 802.1X PAE address';
  795.         if (mac_equals($mac, '01:80:C2:00:00:03')) $app = 'Link Layer Discovery Protocol, EtherType is 0x88CC';
  796.         if (mac_equals($mac, '01:80:C2:00:00:04')) $app = 'IEEE MAC-specific Control Protocols group address';
  797.         if (mac_equals($mac, '01:80:C2:00:00:05')) $app = 'Reserved for future standardization';
  798.         if (mac_equals($mac, '01:80:C2:00:00:06')) $app = 'Reserved for future standardization';
  799.         if (mac_equals($mac, '01:80:C2:00:00:07')) $app = 'MEF Forum ELMI protocol group address';
  800.         if (mac_equals($mac, '01:80:C2:00:00:08')) $app = 'Provider Bridge group address';
  801.         if (mac_equals($mac, '01:80:C2:00:00:08')) $app = 'Spanning Tree Protocol (for provider bridges) IEEE 802.1ad, EtherType is 0x0802';
  802.         if (mac_equals($mac, '01:80:C2:00:00:09')) $app = 'Reserved for future standardization';
  803.         if (mac_equals($mac, '01:80:C2:00:00:10')) $app = 'All LANs Bridge Management group address (deprecated)';
  804.         if (mac_equals($mac, '01:80:C2:00:00:10')) $app = 'Bridge Management, EtherType is 0x0802';
  805.         if (mac_equals($mac, '01:80:C2:00:00:11')) $app = 'Load Server generic address';
  806.         if (mac_equals($mac, '01:80:C2:00:00:11')) $app = 'Load Server, EtherType is 0x0802';
  807.         if (mac_equals($mac, '01:80:C2:00:00:12')) $app = 'Loadable Device generic address';
  808.         if (mac_equals($mac, '01:80:C2:00:00:12')) $app = 'Loadable Device, EtherType is 0x0802';
  809.         if (mac_equals($mac, '01:80:C2:00:00:13')) $app = 'Transmission of IEEE 1905.1 control packets';
  810.         if (mac_equals($mac, '01:80:C2:00:00:14')) $app = 'All Level 1 Intermediate Systems address';
  811.         if (mac_equals($mac, '01:80:C2:00:00:14')) $app = 'OSI Route level 1 (within area), EtherType is 0x0802';
  812.         if (mac_equals($mac, '01:80:C2:00:00:15')) $app = 'All Level 2 Intermediate Systems address';
  813.         if (mac_equals($mac, '01:80:C2:00:00:15')) $app = 'OSI Route level 2 (between area), EtherType is 0x0802';
  814.         if (mac_equals($mac, '01:80:C2:00:00:16')) $app = 'All CONS End Systems address';
  815.         if (mac_equals($mac, '01:80:C2:00:00:17')) $app = 'All CONS SNARES address';
  816.         if (mac_equals($mac, '01:80:C2:00:00:18')) $app = 'Generic address for All Manager Stations';
  817.         if (mac_equals($mac, '01:80:C2:00:00:19')) $app = 'Groupcast with retries (GCR) MAC group address';
  818.         if (mac_between($mac, '01:80:C2:00:00:20', '01:80:C2:00:00:2F')) $app = 'Reserved for use by Multiple Registration Protocol (MRP) applications';
  819.         if (mac_equals($mac, '01:80:C2:00:00:21')) $app = 'GARP VLAN Registration Protocol (also known as IEEE 802.1q GVRP), EtherType is 0x88f5';
  820.         if (mac_between($mac, '01:80:C2:00:00:30', '01:80:C2:00:00:3F')) $app = 'Destination group MAC addresses for CCM and Linktrace messages';
  821.         if (mac_between($mac, '01:80:C2:00:00:30', '01:80:C2:00:00:3F')) $app = 'Ethernet CFM Protocol IEEE 802.1ag, EtherType is 0x8902';
  822.         if (mac_between($mac, '01:80:C2:00:00:50', '01:80:C2:00:00:FF')) $app = 'Unassigned standard group MAC address';
  823.         if (mac_equals($mac, '01:80:C2:00:01:00')) $app = 'Ring Management Directed Beacon multicast address';
  824.         if (mac_equals($mac, '01:80:C2:00:01:00')) $app = 'FDDI RMT Directed Beacon, EtherType is 0x0802';
  825.         if (mac_between($mac, '01:80:C2:00:01:01', '01:80:C2:00:01:0F')) $app = 'Assigned to ISO/IEC JTC1/SC25 for future use';
  826.         if (mac_equals($mac, '01:80:C2:00:01:10')) $app = 'Status Report Frame Status Report Protocol multicast address';
  827.         if (mac_equals($mac, '01:80:C2:00:01:10')) $app = 'FDDI status report frame, EtherType is 0x0802';
  828.         if (mac_between($mac, '01:80:C2:00:01:11', '01:80:C2:00:01:1F')) $app = 'Assigned to ISO/IEC JTC1/SC25 for future use';
  829.         if (mac_equals($mac, '01:80:C2:00:01:20')) $app = 'All FDDI Concentrator MACs';
  830.         if (mac_between($mac, '01:80:C2:00:01:21', '01:80:C2:00:01:2F')) $app = 'Assigned to ISO/IEC JTC1/SC25 for future use';
  831.         if (mac_equals($mac, '01:80:C2:00:01:30')) $app = 'Synchronous Bandwidth Allocation address';
  832.         if (mac_between($mac, '01:80:C2:00:01:31', '01:80:C2:00:01:FF')) $app = 'Assigned to ISO/IEC JTC1/SC25 for future use';
  833.         if (mac_between($mac, '01:80:C2:00:02:00', '01:80:C2:00:02:FF')) $app = 'Assigned to ETSI for future use';
  834.         if (mac_between($mac, '01:80:C2:00:03:00', '01:80:C2:FF-FF-FF')) $app = 'Unassigned standard group MAC address';
  835.         if (mac_equals($mac, '09:00:4C:00:00:00')) $app = 'BICC 802.1 management, EtherType is 0x0802';
  836.         if (mac_equals($mac, '09:00:4C:00:00:0C')) $app = 'BICC Remote bridge STA 802.1(D) Rev8, EtherType is 0x0802';
  837.         if (mac_equals($mac, '09:00:4C:00:00:02')) $app = 'BICC 802.1 management, EtherType is 0x0802';
  838.         if (mac_equals($mac, '09:00:4C:00:00:06')) $app = 'BICC Local bridge STA 802.1(D) Rev6, EtherType is 0x0802';
  839.         if (mac_between($mac, '33:33:00:00:00:00', '33:33:FF:FF:FF:FF')) $app = 'IPv6 multicast, EtherType is 0x86DD';
  840.  
  841.         // === FAQ "How to recognise an ISO 9542 ES-IS protocol's MAC address application?" ===
  842.         // https://standards.ieee.org/products-services/regauth/grpmac/public.html
  843.         if (mac_equals($mac, '09:00:2B:00:00:04')) $app = 'All End System Network Entities address';
  844.         if (mac_equals($mac, '09:00:2B:00:00:05')) $app = 'All Intermediate System Network Entities address';
  845.  
  846.         // === FAQ "How to recognise an IANA MAC address application?" ===
  847.         // https://www.iana.org/assignments/ethernet-numbers/ethernet-numbers.xhtml
  848.         // http://www.iana.org/go/rfc7042
  849.         // https://tools.ietf.org/html/rfc1060
  850.         if (mac_between($mac, '00:00:5E:00-52:14', '00:00:5E:00:52:FF')) $app = 'Unassigned (small allocations)';
  851.         if (mac_between($mac, '00:00:5E:00:00:00', '00:00:5E:00:00:FF')) $app = 'Reserved and require IESG Ratification for assignment';
  852.         if (mac_between($mac, '00:00:5E:00:03:00', '00:00:5E:00:51:FF')) $app = 'Unassigned';
  853.         if (mac_between($mac, '00:00:5E:00:52:00', '00:00:5E:00:52:FF')) $app = 'Is used for very small assignments. Currently, 3 out of these 256 values have been assigned.';
  854.         if (mac_between($mac, '00:00:5E:00:52:00', '00:00:5E:00:52:00')) $app = 'PacketPWEthA';
  855.         if (mac_between($mac, '00:00:5E:00:52:01', '00:00:5E:00:52:01')) $app = 'PacketPWEthB';
  856.         if (mac_between($mac, '00:00:5E:00:52:02', '00:00:5E:00:52:12')) $app = 'Unassigned (small allocations)';
  857.         if (mac_between($mac, '00:00:5E:00:53:00', '00:00:5E:00:53:FF')) $app = 'Assigned for use in documentation';
  858.         if (mac_between($mac, '00:00:5E:00:54:00', '00:00:5E:90:00:FF')) $app = 'Unassigned';
  859.         if (mac_between($mac, '00:00:5E:90:01:01', '00:00:5E:90:01:FF')) $app = 'Unassigned (small allocations requiring both unicast and multicast)';
  860.         if (mac_between($mac, '00:00:5E:EF:10:00:00:00', '00:00:5E:EF:10:00:00:FF')) $app = 'General documentation';
  861.         if (mac_between($mac, '00:00:5E:FF:FE:00:53:00', '00:00:5E:FF:FE:00:53:FF')) $app = 'EUI-48 derived documentation';
  862.         if (mac_between($mac, '01:00:5E:00:00:00', '01:00:5E:7F:FF:FF')) $app = 'DoD Internet Multicast (EtherType is 0x0800)'; // TODO: IPv4-Multicast  (Dabei werden dann die unteren 23 Bit der IP-Multicast-Adresse direkt auf die untersten 23 Bit der MAC-Adresse abgebildet. Der IP-Multicast-Adresse 224.0.0.1 ist somit die Multicast-MAC-Adresse 01-00-5e-00-00-01 fest zugeordnet.)
  863.         if (mac_between($mac, '01:00:5E:80:00:00', '01:00:5E:FF:FF:FF')) $app = 'DoD Internet';
  864.         if (mac_equals($mac, '01:00:5E:90:00:02')) $app = 'AllL1MI-ISs';
  865.         if (mac_equals($mac, '01:00:5E:90:00:03')) $app = 'AllL2MI-ISs';
  866.         if (mac_between($mac, '01:00:5E:90:00:04', '01:00:5E:90:00:FF')) $app = 'Unassigned (small allocations)';
  867.         if (mac_between($mac, '01:00:5E:90:01:01', '01:00:5E:90:01:FF')) $app = 'Unassigned (small allocations requiring both unicast and multicast)';
  868.         if (mac_between($mac, '01:00:5E:90:02:00', '01:00:5E:90:0F:FF')) $app = 'Unassigned';
  869.         if (mac_between($mac, '01:00:5E:90:02:00', '00:00:5E:FF:FF:FF')) $app = 'Unassigned';
  870.         if (mac_between($mac, '01:00:5E:90:10:00', '01:00:5E:90:10:FF')) $app = 'Documentation';
  871.         if (mac_between($mac, '01:00:5E:90:11:00', '01:00:5E:FF:FF:FF')) $app = 'Unassigned';
  872.         if (mac_between($mac, '01:00:5E:EF:10:00:00:00', '01:00:5E:EF:10:00:00:FF')) $app = 'General documentation';
  873.         if (mac_between($mac, '02:00:5E:00:00:00:00:00', '02:00:5E:0F:FF:FF:FF:FF')) $app = 'Reserved';
  874.         if (mac_between($mac, '02:00:5E:10:00:00:00:00', '02:00:5E:10:00:00:00:FF')) $app = 'Documentation';
  875.         if (mac_between($mac, '02:00:5E:10:00:00:01:00', '02:00:5E:EF:FF:FF:FF:FF')) $app = 'Unassigned';
  876.         if (mac_between($mac, '02:00:5E:F0:00:00:00:00', '02:00:5E:FD:FF:FF:FF:FF')) $app = 'Reserved';
  877.         if (mac_between($mac, '02:00:5E:FE:00:00:00:00', '02:00:5E:FE:FF:FF:FF:FF')) $app = 'IPv4 Addr Holders';
  878.         if (mac_between($mac, '02:00:5E:FF:00:00:00:00', '02:00:5E:FF:FD:FF:FF:FF')) $app = 'Reserved';
  879.         if (mac_between($mac, '02:00:5E:FF:FE:00:00:00', '02:00:5E:FF:FE:FF:FF:FF')) $app = 'IANA EUI-48 Holders';
  880.         if (mac_between($mac, '02:00:5E:FF:FF:00:00:00', '02:00:5E:FF:FF:FF:FF:FF')) $app = 'Reserved';
  881.         if (mac_between($mac, '03:00:5E:00:00:00:00:00', '03:00:5E:0F:FF:FF:FF:FF')) $app = 'Reserved';
  882.         if (mac_between($mac, '03:00:5E:10:00:00:00:00', '03:00:5E:10:00:00:00:FF')) $app = 'Documentation';
  883.         if (mac_between($mac, '03:00:5E:10:00:00:01:00', '03:00:5E:EF:FF:FF:FF:FF')) $app = 'Unassigned';
  884.         if (mac_between($mac, '03:00:5E:F0:00:00:00:00', '03:00:5E:FD:FF:FF:FF:FF')) $app = 'Reserved';
  885.         if (mac_between($mac, '03:00:5E:FF:00:00:00:00', '03:00:5E:FF:FD:FF:FF:FF')) $app = 'Reserved';
  886.         if (mac_between($mac, '03:00:5E:FF:FE:00:00:00', '03:00:5E:FF:FE:FF:FF:FF')) $app = 'IANA EUI-48 Holders';
  887.         if (mac_between($mac, '03:00:5E:FF:FF:00:00:00', '03:00:5E:FF:FF:FF:FF:FF')) $app = 'Reserved';
  888.  
  889.         // === FAQ "How to recognise a Cisco's MAC address application?" ===
  890.         // https://www.cisco.com/c/en/us/support/docs/switches/catalyst-4500-series-switches/13414-103.html
  891.         // https://tools.ietf.org/html/rfc1060
  892.         // https://en.wikipedia.org/wiki/Multicast_address#cite_note-15
  893.         // http://www.cavebear.com/archive/cavebear/Ethernet/Ethernet.txt
  894.         if (mac_equals($mac, '01:00:0C:00:00:00')) $app = 'Inter Switch Link (ISL)';
  895.         if (mac_equals($mac, '01:00:0C:CC:CC:CC')) $app = 'CDP (Cisco Discovery Protocol), VTP (VLAN Trunking Protocol), EtherType is 0x0802';
  896.         if (mac_equals($mac, '01:00:0C:CC:CC:CC')) $app = 'Port Aggregation Protocol (PAgP), SNAP HDLC Protocol Type is 0x0104';
  897.         if (mac_equals($mac, '01:00:0C:CC:CC:CC')) $app = 'Unidirectional Link Detection (UDLD), SNAP HDLC Protocol Type is 0x0111';
  898.         if (mac_equals($mac, '01:00:0C:CC:CC:CC')) $app = 'Dynamic Trunking (DTP), SNAP HDLC Protocol Type is 0x2004';
  899.         if (mac_equals($mac, '01:00:0C:CC:CC:CC')) $app = 'VLAN Trunking (VTP), SNAP HDLC Protocol Type is 0x2003';
  900.         if (mac_equals($mac, '01:00:0C:CC:CC:CD')) $app = 'Cisco Shared Spanning Tree Protocol address, EtherType is 0x0802';
  901.         if (mac_equals($mac, '01:00:0C:CC:CC:CD')) $app = 'Spanning Tree PVSTP+, SNAP HDLC Protocol Type is 0x010B';
  902.         if (mac_equals($mac, '01:00:0C:CD:CD:CD')) $app = 'STP Uplink Fast, SNAP HDLC Protocol Type is 0x200A';
  903.         if (mac_equals($mac, '01:00:0C:CD:CD:CE')) $app = 'VLAN Bridge, SNAP HDLC Protocol Type is 0x010C';
  904.         if (mac_equals($mac, '01:00:0C:DD:DD:DD')) $app = 'CGMP (Cisco Group Management Protocol)';
  905.  
  906.         // === FAQ "How to recognise an ITU-T's MAC address application?" ===
  907.         // https://www.itu.int/en/ITU-T/studygroups/2017-2020/15/Documents/IEEE-assigned_OUIs-30-06-2017.docx
  908.         if (mac_between($mac, '01:19:A7:00:00:00', '01:19:A7:00:00:FF')) $app = 'R-APS per G.8032';
  909.         if (mac_between($mac, '01:19:A7:52:76:90', '01:19:A7:52:76:9F')) $app = 'Multicast per G.9961';
  910.  
  911.         // === FAQ "How to recognise Digital Equipment Corporation's MAC address application?" ===
  912.         if (mac_equals($mac, '09:00:2B:00:00:00')) $app = 'DEC MUMPS, EtherType is 0x6009';
  913.         if (mac_equals($mac, '09:00:2B:00:00:0F')) $app = 'DEC Local Area Transport (LAT), EtherType is 0x6004';
  914.         if (mac_equals($mac, '09:00:2B:00:00:01')) $app = 'DEC DSM/DDP, EtherType is 0x8039';
  915.         if (mac_between($mac, '09:00:2B:00:00:10', '09:00:2B:00:00:1F')) $app = 'DEC Experimental';
  916.         if (mac_equals($mac, '09:00:2B:00:00:02')) $app = 'DEC VAXELN, EtherType is 0x803B';
  917.         if (mac_equals($mac, '09:00:2B:00:00:03')) $app = 'DEC Lanbridge Traffic Monitor (LTM), EtherType is 0x8038';
  918.         if (mac_equals($mac, '09:00:2B:00:00:04')) $app = 'DEC MAP End System';
  919.         if (mac_equals($mac, '09:00:2B:00:00:05')) $app = 'DEC MAP Intermediate System';
  920.         if (mac_equals($mac, '09:00:2B:00:00:06')) $app = 'DEC CSMA/CD Encryption, EtherType is 0x803D';
  921.         if (mac_equals($mac, '09:00:2B:00:00:07')) $app = 'DEC NetBios Emulator, EtherType is 0x8040';
  922.         if (mac_equals($mac, '09:00:2B:01:00:00')) $app = 'DEC LanBridge, EtherType is 0x8038';
  923.         if (mac_equals($mac, '09:00:2B:01:00:01')) $app = 'DEC LanBridge, EtherType is 0x8038';
  924.         if (mac_equals($mac, '09:00:2B:02:00:00')) $app = 'DEC DNA Level 2 Routing';
  925.         if (mac_equals($mac, '09:00:2B:02:01:00')) $app = 'DEC DNA Naming Service Advertisement, EtherType is 0x803C';
  926.         if (mac_equals($mac, '09:00:2B:02:01:01')) $app = 'DEC DNA Naming Service Solicitation, EtherType is 0x803C';
  927.         if (mac_equals($mac, '09:00:2B:02:01:02')) $app = 'DEC Distributed Time Service, EtherType is 0x803E';
  928.         if (mac_equals($mac, '09:00:2B:02:01:09')) $app = 'DEC Availability Manager for Distributed Systems DECamds, EtherType is 0x8048';
  929.         if (mac_between($mac, '09:00:2B:03:00:00', '09:00:2B:03:FF:FF')) $app = 'DEC default filtering by bridges';
  930.         if (mac_equals($mac, '09:00:2B:04:00:00')) $app = 'DEC Local Area System Transport (LAST), EtherType is 0x8041';
  931.         if (mac_equals($mac, '09:00:2B:23:00:00')) $app = 'DEC Argonaut Console, EtherType is 0x803A';
  932.         if (mac_equals($mac, 'AB:00:00:01:00:00')) $app = 'DEC Maintenance Operation Protocol (MOP) Dump/Load Assistance, EtherType is 0x6001';
  933.         if (mac_equals($mac, 'AB:00:00:02:00:00')) $app = 'DEC Maintenance Operation Protocol (MOP), EtherType is 0x6002';
  934.         if (mac_equals($mac, 'AB:00:00:03:00:00')) $app = 'DECNET Phase IV end node, EtherType is 0x6003';
  935.         if (mac_equals($mac, 'AB:00:00:04:00:00')) $app = 'DECNET Phase IV Router, EtherType is 0x6003';
  936.         if (mac_between($mac, 'AB:00:00:05:00:00', 'AB:00:03:FF:FF:FF')) $app = 'Reserved DEC';
  937.         if (mac_equals($mac, 'AB:00:03:00:00:00')) $app = 'DEC Local Area Transport (LAT) - old, EtherType is 0x6004';
  938.         if (mac_between($mac, 'AB:00:04:00:00:00', 'AB:00:04:00:FF:FF')) $app = 'Reserved DEC customer private use';
  939.         if (mac_between($mac, 'AB:00:04:01:00:00', 'AB:00:04:01:FF:FF')) $app = 'DEC Local Area VAX Cluster groups System Communication Architecture (SCA), EtherType is 0x6007';
  940.  
  941.         // https://standards.ieee.org/products-programs/regauth/grpmac/public/
  942.         // TODO: Check for duplicates between these and the ones at the top
  943.         // IEEE Std 802.1D and IEEE Std 802.1Q Reserved Addresses
  944.         if (mac_equals($mac, '01-80-C2-00-00-00')) $app = 'IEEE Std 802.1Q / Bridge Group address, Nearest Customer Bridge group address';
  945.         if (mac_equals($mac, '01-80-C2-00-00-01')) $app = 'IEEE Std 802.1Q / IEEE MAC-specific Control Protocols group address';
  946.         if (mac_equals($mac, '01-80-C2-00-00-02')) $app = 'IEEE Std 802.1Q / IEEE 802.3 Slow_Protocols_Multicast address';
  947.         if (mac_equals($mac, '01-80-C2-00-00-03')) $app = 'IEEE Std 802.1Q / Nearest non-TPMR Bridge group address, IEEE Std 802.1X PAE address';
  948.         if (mac_equals($mac, '01-80-C2-00-00-04')) $app = 'IEEE Std 802.1Q / IEEE MAC-specific Control Protocols group address';
  949.         if (mac_equals($mac, '01-80-C2-00-00-05')) $app = 'IEEE Std 802.1Q / Reserved for future standardization';
  950.         if (mac_equals($mac, '01-80-C2-00-00-06')) $app = 'IEEE Std 802.1Q / Reserved for future standardization';
  951.         if (mac_equals($mac, '01-80-C2-00-00-07')) $app = 'IEEE Std 802.1Q / MEF Forum ELMI protocol group address';
  952.         if (mac_equals($mac, '01-80-C2-00-00-08')) $app = 'IEEE Std 802.1Q / Provider Bridge group address';
  953.         if (mac_equals($mac, '01-80-C2-00-00-09')) $app = 'IEEE Std 802.1Q / Reserved for future standardization';
  954.         if (mac_equals($mac, '01-80-C2-00-00-0A')) $app = 'IEEE Std 802.1Q / Reserved for future standardization';
  955.         if (mac_equals($mac, '01-80-C2-00-00-0B')) $app = 'IEEE Std 802.1Q / EDE-SS PEP Address';
  956.         if (mac_equals($mac, '01-80-C2-00-00-0C')) $app = 'IEEE Std 802.1Q / Reserved for future standardization';
  957.         if (mac_equals($mac, '01-80-C2-00-00-0D')) $app = 'IEEE Std 802.1Q / Provider Bridge MVRP address';
  958.         if (mac_equals($mac, '01-80-C2-00-00-0E')) $app = 'IEEE Std 802.1Q / Individual LAN Scope group address, Nearest Bridge group address';
  959.         if (mac_equals($mac, '01-80-C2-00-00-0F')) $app = 'IEEE Std 802.1Q / Reserved for future standardization';
  960.         // Standard Group MAC Addresses
  961.         if (mac_equals($mac, '01-80-C2-00-00-10')) $app = 'All LANs Bridge Management Group Address (deprecated)';
  962.         if (mac_equals($mac, '01-80-C2-00-00-11')) $app = 'Load Server Generic Address';
  963.         if (mac_equals($mac, '01-80-C2-00-00-12')) $app = 'Loadable Device Generic Address';
  964.         if (mac_equals($mac, '01-80-C2-00-00-13')) $app = 'Transmission of IEEE 1905.1 control packets';
  965.         if (mac_equals($mac, '01-80-C2-00-00-14')) $app = 'All Level 1 Intermediate Systems Address';
  966.         if (mac_equals($mac, '01-80-C2-00-00-15')) $app = 'All Level 2 Intermediate Systems Address';
  967.         if (mac_equals($mac, '01-80-C2-00-00-16')) $app = 'All CONS End Systems Address';
  968.         if (mac_equals($mac, '01-80-C2-00-00-17')) $app = 'All CONS SNARES Address';
  969.         if (mac_equals($mac, '01-80-C2-00-00-18')) $app = 'Generic Address for All Manager Stations';
  970.         if (mac_equals($mac, '01-80-C2-00-00-19')) $app = 'Groupcast with retries (GCR) MAC Group Address';
  971.         if (mac_equals($mac, '01-80-C2-00-00-1A')) $app = 'Generic Address for All Agent Stations';
  972.         if (mac_equals($mac, '01-80-C2-00-00-1B')) $app = 'All Multicast Capable End Systems Address';
  973.         if (mac_equals($mac, '01-80-C2-00-00-1C')) $app = 'All Multicast Announcements Address';
  974.         if (mac_equals($mac, '01-80-C2-00-00-1D')) $app = 'All Multicast Capable Intermediate Systems Address';
  975.         if (mac_equals($mac, '01-80-C2-00-00-1E')) $app = 'All DTR Concentrators MAC Group Address';
  976.         if (mac_equals($mac, '01-80-C2-00-00-1F')) $app = 'EDE-CC PEP Address';
  977.         if (mac_between($mac, '01-80-C2-00-00-20','01-80-C2-00-00-2F')) $app = 'Reserved for use by Multiple Registration Protocol (MRP) applications';
  978.         if (mac_between($mac, '01-80-C2-00-00-30','01-80-C2-00-00-3F')) $app = 'Destination group MAC addresses for CCM and Linktrace messages';
  979.         if (mac_between($mac, '01-80-C2-00-00-40','01-80-C2-00-00-4F')) $app = 'Group MAC addresses used by the TRILL protocols';
  980.         if (mac_between($mac, '01-80-C2-00-00-50','01-80-C2-00-00-FF')) $app = 'unassigned';
  981.         if (mac_equals($mac, '01-80-C2-00-01-00')) $app = 'Ring Management Directed Beacon Multicast Address';
  982.         if (mac_between($mac, '01-80-C2-00-01-01','01-80-C2-00-01-0F')) $app = 'Assigned to ISO/IEC JTC1/SC25 for future use';
  983.         if (mac_equals($mac, '01-80-C2-00-01-10')) $app = 'Status Report Frame Status Report Protocol Multicast Address';
  984.         if (mac_between($mac, '01-80-C2-00-01-11','01-80-C2-00-01-1F')) $app = 'Assigned to ISO/IEC JTC1/SC25 for future use';
  985.         if (mac_equals($mac, '01-80-C2-00-01-20')) $app = 'ISO/IEC 9314-2 All FDDI Concentrator MACs';
  986.         if (mac_between($mac, '01-80-C2-00-01-21','01-80-C2-00-01-2F')) $app = 'Assigned to ISO/IEC JTC1/SC25 for future use';
  987.         if (mac_equals($mac, '01-80-C2-00-01-30')) $app = 'ISO/IEC 9314-6 Synchronous Bandwidth Allocation Address';
  988.         if (mac_between($mac, '01-80-C2-00-01-31','01-80-C2-00-01-FF')) $app = 'Assigned to ISO/IEC JTC1/SC25 for future use';
  989.         if (mac_between($mac, '01-80-C2-00-02-00','01-80-C2-00-02-FF')) $app = 'Assigned to ETSI for future use';
  990.         if (mac_between($mac, '01-80-C2-00-03-00', '01-80-C2-FF-FF-FF')) $app = 'unassigned';
  991.         if (mac_equals($mac, '09-00-2B-00-00-04')) $app = 'ISO 9542 All End System Network Entities Address';
  992.         if (mac_equals($mac, '09-00-2B-00-00-05')) $app = 'ISO 9542 All Intermediate System Network Entities Address';
  993.         // Group MAC Addresses Used in ISO 9542 ES-IS Protocol
  994.         if (mac_equals($mac, '09-00-2B-00-00-04')) $app = 'ISO 9542 All End System Network Entities Address';
  995.         if (mac_equals($mac, '09-00-2B-00-00-05')) $app = 'ISO 9542 All Intermediate System Network Entities Address';
  996.         // Locally Administered Group MAC Addresses Used by IEEE Std 802.5 (IEEE Std 802.5 Functional Addresses)
  997.         if (mac_equals($mac, '03-00-00-00-00-08')) $app = 'Configuration Report Server (CRS) MAC Group Address';
  998.         if (mac_equals($mac, '03-00-00-00-00-10')) $app = 'Ring Error Monitor (REM) MAC Group Address';
  999.         if (mac_equals($mac, '03-00-00-00-00-40')) $app = 'Ring Parameter Server (RPS) MAC Group Address';
  1000.         if (mac_equals($mac, '03-00-00-00-01-00')) $app = 'All Intermediate System Network Entities Address';
  1001.         if (mac_equals($mac, '03-00-00-00-02-00')) $app = 'All End System Network Entities Address, and Lobe Media Test (LMT) MAC Group Address';
  1002.         if (mac_equals($mac, '03-00-00-00-04-00')) $app = 'Generic Address for all Manager Stations';
  1003.         if (mac_equals($mac, '03-00-00-00-08-00')) $app = 'All CONs SNARES Address';
  1004.         if (mac_equals($mac, '03-00-00-00-10-00')) $app = 'All CONs End System Address';
  1005.         if (mac_equals($mac, '03-00-00-00-20-00')) $app = 'Loadable Device Generic Address';
  1006.         if (mac_equals($mac, '03-00-00-00-40-00')) $app = 'Load Server Generic Address';
  1007.         if (mac_equals($mac, '03-00-00-40-00-00')) $app = 'Generic Address for all Agent Stations';
  1008.  
  1009.         if ($app) {
  1010.                 echo sprintf("%-32s %s\n", "Special use:", $app);
  1011.         }
  1012.  
  1013. }
  1014.  
  1015. /**
  1016.  * @param string $mac1
  1017.  * @param string $mac2
  1018.  * @return bool
  1019.  */
  1020. function mac_equals(string $mac1, string $mac2): bool {
  1021.         $mac1test = eui64_to_eui48($mac1);
  1022.         if ($mac1test === false) return false;
  1023.         $mac2test = eui64_to_eui48($mac2);
  1024.         if ($mac2test === false) return false;
  1025.  
  1026.         if (eui_bits($mac1test) != eui_bits($mac2test)) {
  1027.                 $mac1test = eui48_to_eui64($mac1);
  1028.                 $mac2test = eui48_to_eui64($mac2);
  1029.         }
  1030.  
  1031.         return mac_canonize($mac1test) == mac_canonize($mac2test);
  1032. }
  1033.  
  1034. /**
  1035.  * @param string $mac
  1036.  * @param string $low
  1037.  * @param string $high
  1038.  * @return bool
  1039.  */
  1040. function mac_between(string $mac, string $low, string $high): bool {
  1041.         $mactest = eui64_to_eui48($mac);
  1042.         if ($mactest === false) return false;
  1043.         $lowtest = eui64_to_eui48($low);
  1044.         if ($lowtest === false) return false;
  1045.         $hightest = eui64_to_eui48($high);
  1046.         if ($hightest === false) return false;
  1047.  
  1048.         if ((eui_bits($mactest) != eui_bits($lowtest)) || (eui_bits($lowtest) != eui_bits($hightest))) {
  1049.                 $mactest = eui48_to_eui64($mac);
  1050.                 if ($mactest === false) return false; // e.g. trying ELI-48 to ELI-64
  1051.                 $lowtest = eui48_to_eui64($low);
  1052.                 if ($lowtest === false) return false; // e.g. trying ELI-48 to ELI-64
  1053.                 $hightest = eui48_to_eui64($high);
  1054.                 if ($hightest === false) return false; // e.g. trying ELI-48 to ELI-64
  1055.         }
  1056.  
  1057.         $mactest = strtoupper(preg_replace('@[^0-9A-F]@', '', $mactest));
  1058.         $lowtest = strtoupper(preg_replace('@[^0-9A-F]@', '', $lowtest));
  1059.         $hightest = strtoupper(preg_replace('@[^0-9A-F]@', '', $hightest));
  1060.  
  1061.         $mactest = gmp_init($mactest, 16);
  1062.         $lowtest = gmp_init($lowtest, 16);
  1063.         $hightest = gmp_init($hightest, 16);
  1064.  
  1065.         return (gmp_cmp($mactest, $lowtest) >= 0) && (gmp_cmp($mactest, $hightest) <= 0);
  1066. }
  1067.  
  1068. /**
  1069.  * Gets the current MAC address of the system
  1070.  * @return string|false MAC address of the local system
  1071.  */
  1072. function get_mac_address() {
  1073.         static $detected_mac = false;
  1074.  
  1075.         if ($detected_mac !== false) { // false NOT null!
  1076.                 return $detected_mac;
  1077.         }
  1078.  
  1079.         if (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN') {
  1080.                 // Windows
  1081.                 $cmds = array(
  1082.                         "ipconfig /all", // faster
  1083.                         "getmac"
  1084.                 );
  1085.                 foreach ($cmds as $cmd) {
  1086.                         $out = array();
  1087.                         $ec = -1;
  1088.                         exec($cmd, $out, $ec);
  1089.                         if ($ec == 0) {
  1090.                                 $out = implode("\n",$out);
  1091.                                 $m = array();
  1092.                                 if (preg_match("/([0-9a-f]{2}-[0-9a-f]{2}-[0-9a-f]{2}-[0-9a-f]{2}-[0-9a-f]{2}-[0-9a-f]{2})/ismU", $out, $m)) {
  1093.                                         $detected_mac = strtolower($m[1]);
  1094.                                         return $detected_mac;
  1095.                                 }
  1096.                         }
  1097.                 }
  1098.         } else if (strtoupper(PHP_OS) == 'DARWIN') {
  1099.                 // Mac OS X
  1100.                 $cmds = array(
  1101.                         "networksetup -listallhardwareports 2>/dev/null",
  1102.                         "netstat -i 2>/dev/null"
  1103.                 );
  1104.                 foreach ($cmds as $cmd) {
  1105.                         $out = array();
  1106.                         $ec = -1;
  1107.                         exec($cmd, $out, $ec);
  1108.                         if ($ec == 0) {
  1109.                                 $out = implode("\n",$out);
  1110.                                 $m = array();
  1111.                                 if (preg_match("/([0-9a-f]{2}:[0-9a-f]{2}:[0-9a-f]{2}:[0-9a-f]{2}:[0-9a-f]{2}:[0-9a-f]{2})/ismU", $out, $m)) {
  1112.                                         $detected_mac = $m[1];
  1113.                                         return $detected_mac;
  1114.                                 }
  1115.                         }
  1116.                 }
  1117.         } else {
  1118.                 // Linux
  1119.                 $addresses = @glob('/sys/class/net/'.'*'.'/address');
  1120.                 foreach ($addresses as $x) {
  1121.                         if (!strstr($x,'/lo/')) {
  1122.                                 $detected_mac = trim(file_get_contents($x));
  1123.                                 if (substr(mac_type($detected_mac),0,6) == 'EUI-48') {
  1124.                                         return $detected_mac;
  1125.                                 }
  1126.                         }
  1127.                 }
  1128.                 $cmds = array(
  1129.                         "netstat -ie 2>/dev/null",
  1130.                         "ifconfig 2>/dev/null" // only available for root (because it is in sbin)
  1131.                 );
  1132.                 foreach ($cmds as $cmd) {
  1133.                         $out = array();
  1134.                         $ec = -1;
  1135.                         exec($cmd, $out, $ec);
  1136.                         if ($ec == 0) {
  1137.                                 $out = implode("\n",$out);
  1138.                                 $m = array();
  1139.                                 if (preg_match("/([0-9a-f]{2}:[0-9a-f]{2}:[0-9a-f]{2}:[0-9a-f]{2}:[0-9a-f]{2}:[0-9a-f]{2})/ismU", $out, $m)) {
  1140.                                         $detected_mac = $m[1];
  1141.                                         return $detected_mac;
  1142.                                 }
  1143.                         }
  1144.                 }
  1145.         }
  1146.  
  1147.         return $detected_mac;
  1148. }
  1149.