<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">MAC Addresses may cross into fear of disclosure of private identifying information.<div class=""><br class=""></div><div class="">All they really need is the OUI portion of the MAC addresses which is fairly anonymous in terms of identifying anyone specific, yet provides all the needed data.</div><div class=""><br class=""></div><div class="">Owen</div><div class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Nov 7, 2019, at 11:08 , Sabri Berisha <<a href="mailto:sabri@cluecentral.net" class="">sabri@cluecentral.net</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div style="font-family: tahoma, "new york", times, serif; font-size: 10pt;" class=""><div class=""><div class="">Hi,</div><div class=""><br data-mce-bogus="1" class=""></div><div class="">What you could consider is asking a few of the major internet exchanges if they'd be so kind to send you a list of MAC addresses seen on their LANs. Based on the MAC you can determine the manufacturer. If you have three or four big ones, you have a decent sample size as most larger networks are on multiple IXes anyway.</div><div class=""><br data-mce-bogus="1" class=""></div><div class="">If you do compile a list, I'm sure this list would be interested in the results :)</div><div class=""><br class=""></div><div data-marker="__SIG_PRE__" class="">Thanks,<span class="Apple-converted-space"> </span><br class=""><br class="">Sabri<span class="Apple-converted-space"> </span><br class=""><br class=""></div><div class=""><br class=""><span id="zwchr" data-marker="__DIVIDER__" class="">----- On Nov 6, 2019, at 10:39 AM, Compton, Rich A <<a href="mailto:Rich.Compton@charter.com" style="color: rgb(149, 79, 114); text-decoration: underline;" class="">Rich.Compton@charter.com</a>> wrote:<br class=""></span></div><div data-marker="__QUOTED_TEXT__" class=""><blockquote data-mce-style="border-left: 2px solid #1010FF; margin-left: 5px; padding-left: 5px; color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;" style="border-left-width: 2px; border-left-style: solid; border-left-color: rgb(16, 16, 255); margin-left: 5px; padding-left: 5px; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica, Arial, sans-serif; font-size: 12pt;" class=""><div class="WordSection1" style="page: WordSection1;"><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: Calibri, sans-serif;" class="">Hi, I am working with MANRS (<a href="https://www.manrs.org/" target="_blank" style="color: rgb(149, 79, 114); text-decoration: underline;" class="">https://www.manrs.org</a>) on a tool for checking router configs for BGP security / spoofing prevention (e.g. uRPF)<span class="Apple-converted-space"> </span><a href="https://github.com/manrs-tools/MANRS-validator" target="_blank" style="color: rgb(149, 79, 114); text-decoration: underline;" class="">https://github.com/manrs-tools/MANRS-validator</a></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: Calibri, sans-serif;" class="">We are wondering if there is any research on the percentages of different types of devices running BGP on the Internet. </div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: Calibri, sans-serif;" class="">Something like:</div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: Calibri, sans-serif;" class="">Cisco IOS 30%</div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: Calibri, sans-serif;" class="">Junos 30%</div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: Calibri, sans-serif;" class="">Mikrotik 20%</div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: Calibri, sans-serif;" class="">etc…</div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: Calibri, sans-serif;" class="">We are looking to focus our tool on the most prevalent types of devices doing BGP (and the most prevalent with BGP security/spoofing issues) so that we can have the greatest impact. Does anyone have any information on this or know where I can obtain this information? Thanks in advance!</div><p class="MsoNormal" style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: Calibri, sans-serif;"></p><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: Calibri, sans-serif;" class=""> -Rich </div></div>The contents of this e-mail message and<span class="Apple-converted-space"> </span><br class="">any attachments are intended solely for the<span class="Apple-converted-space"> </span><br class="">addressee(s) and may contain confidential<span class="Apple-converted-space"> </span><br class="">and/or legally privileged information. If you<br class="">are not the intended recipient of this message<br class="">or if this message has been addressed to you<span class="Apple-converted-space"> </span><br class="">in error, please immediately alert the sender<br class="">by reply e-mail and then delete this message<span class="Apple-converted-space"> </span><br class="">and any attachments. If you are not the<span class="Apple-converted-space"> </span><br class="">intended recipient, you are notified that<span class="Apple-converted-space"> </span><br class="">any use, dissemination, distribution, copying,<br class="">or storage of this message or any attachment<span class="Apple-converted-space"> </span><br class="">is strictly prohibited.</blockquote></div></div></div></div></blockquote></div><br class=""></div></body></html>