@NolanHerring wrote:
Thanks for sharing.
Might be a good idea to add to the document, how to tell when a device is using a randomized MAC address.
"If a MAC address second character is a 2, 6, A, or E, then it is a randomized address."
x2-xx-xx-xx-xx-xx
x6-xx-xx-xx-xx-xx
xA-xx-xx-xx-xx-xx
xE-xx-xx-xx-xx-xx
And if anyone just thinks "why are these the randomized addresses?"
They are exactly the addresses that are defined in IEEE Ethernet as "Locally Administered Addresses" which have set the second least significant bit of the first octett (the U/L bit):
https://en.wikipedia.org/wiki/MAC_address#Universal_vs._local
If you found this post helpful, please give it Kudos. If my answer solves your problem, please click Accept as Solution so others can benefit from it.