Skip to content

macaddress.io #7304

Locked Answered by dougburks
eric-holtzclaw asked this question in Ideas
Discussion options

You must be logged in to vote

Sorry, we have no plans to include this.

Please keep in mind that for most enterprise deployments, MAC addresses seen by sensors are only going to be for the next hop and not the actual endpoint.

If you really want to look up MAC addresses, you might be able to add a new option to your Hunt action menu:
https://docs.securityonion.net/en/2.3/soc-customization.html#action-menu

Replies: 1 comment

Comment options

You must be logged in to vote
0 replies
Answer selected by dougburks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Ideas
Labels
None yet
2 participants