MACSARU

MAC Address Sort & Report Utility, Sorting OT, IT and Unknowns to action

Capabilities
We attempt to categorize MAC Addresses into OT (Operational Technology), IT (Information Technology), and Unknown classifications, sometimes it will be fully automatic, but there is the means to assist where vendors operate in OT and IT those will need manual assignment, but we've made it easy, helping with discovery and purpose in an IT/OT context.

Supported Schemas
- 00:1A:2B:3C:4D:5E
- 00-1A-2B-3C-4D-5E
- 001A2B3C4D5E

Loaded Databases
- IEEE OUI Database: 27324 entries
- Cisco MAC Database: 55413 entries
- Custom Vendor Database: 27324 entries
- IAB Database: 4575 entries
- OT Keywords: 44 detection patterns
  (Edit to add more: data/ot_keywords.json)

Upload MAC Address File

Drop your MAC address file here or click to browse

Supports .txt, .csv files with MAC addresses

Supports multiple formats: newlines, commas, spaces. Automatically formats and validates addresses.

Sample Network Analysis

Generate a sample report with a mix of OT devices, IT devices, Easter eggs, and unknown devices to see all of MacSorty's features in action.

Sample includes: NSA/TCS devices, industrial equipment, corporate IT, and unknown devices.

Historical Analysis & Comparison

Powerful comparison features: Compare multiple submissions side-by-side, track device changes over time, identify new devices on your network, and analyze network evolution.

Click "Load History" to view previous submissions.

Manual Database Update

Hands-On Process Required

This update process requires manual file downloads, command-line operations, and service restarts. If you're not comfortable with technical tasks, find someone who is to help you with this process.

Keep your MAC address databases current with the latest IEEE registrations. Download the latest database files manually and place them in the data folder to ensure accurate vendor identification.

IEEE Database Downloads

Right-click the links below and select "Save As..." to download. Place downloaded files in the data/ folder.

OUI Database - Organizationally Unique Identifiers (24-bit)
Contains vendor assignments for standard MAC addresses
Download OUI.CSV Save as: ieee_oui_updated.csv
MAM Database - Medium Access Control (28-bit)
Extended assignments with additional address space
Download MAM.CSV Save as: ieee_mam.csv
OUI36 Database - 36-bit Organizationally Unique Identifiers
Smaller address blocks for specialized devices
Download OUI36.CSV Save as: ieee_oui36.csv
IAB Database - Individual Address Blocks
Small address ranges for individual companies
Download IAB.CSV Save as: ieee_iab.csv

Technical Update Process

  1. Download: Click the download links above and save CSV files to your computer
  2. File Management: Place downloaded files in the downloads/ folder (create if needed)
  3. Command Line: Run the database converter utility:
    go run utilities/update_databases.go
  4. Service Management: Stop and restart the WebMAC service/process
  5. Verification: Check database counts in the header increase appropriately
Technical Requirements: This process requires command-line access, Go programming language, file system navigation, and service management skills. The IEEE updates these databases monthly - updates improve vendor identification accuracy.
Need Help? If the above steps seem unclear or intimidating, contact your system administrator or a technical team member to perform this update.

Add OT Keywords

Add new keywords to help identify OT/Industrial devices. Keywords are matched against vendor names to categorize devices.

Current OT Keywords (%!d(MISSING) loaded):

Click "Refresh List" to view current keywords

How it works: When analyzing MAC addresses, vendor names containing these keywords will be automatically categorized as "OT" devices. Keywords are case-insensitive and match partial names.

Examples: "rockwell" matches "Rockwell Automation", "siemens" matches "SIEMENS AG", "schneider" matches "Schneider Electric Industries"