OUI & MAC Lookups
This plugin provides api endpoints to query for IP address ASN & MAC address OUI information
For ASN lookups its using this: https://iptoasn.com/data/ip2asn-v4.tsv.gz
And the OUI vendor list from Wireshark: https://www.wireshark.org/download/automated/data/manuf
Files are downloaded on startup of the container
Beyond direct /asn, /asns, /oui and /ouis lookups, the service exposes /asn_ranges, /country_ranges and /asn_search endpoints. The core API's Geo/ASN firewall blocking consumes these to resolve deny-listed ASNs and countries into IP ranges, which are then programmed into the geo_block nftables set.
The plugin also runs a device classifier that scores fingerprint rules against DHCP, mDNS, SSDP and DNS signals to power device classification, publishing classify:result events and serving /classifications and /fingerprints endpoints.