collect-wireless-mac: get and record the vendor

1 files changed, 12 insertions, 2 deletions

diff --git a/collect-wireless-mac.local b/collect-wireless-mac.local
index 3416046..d6ece7d 100644
--- a/collect-wireless-mac.local
+++ b/collect-wireless-mac.local
@@ -8,6 +8,7 @@
 
 :global "identity";
 
+:global CertificateAvailable;
 :global SendNotification;
 
 :local "place-before" [ / interface wireless access-list find where comment="--- collected above ---" disabled ];
@@ -36,8 +37,16 @@
     :local interface [ / interface wireless registration-table get $regentry interface ];
     :local ssid [ / interface wireless get [ find where name=$interface ] ssid ];
     :local datetime ([ / system clock get date ] . " " . [ / system clock get time ]);
-    :local message ("unknown MAC address " . $mac . " (" . $hostname . ") first seen on " . \
-      $datetime . " connected to SSID " . $ssid . ", interface " . $interface);
+    :local vendor;
+    :do {
+      $CertificateAvailable "731d3d9cfaa061487a1d71445a42f67df0afca2a6c2d2f98ff7b3ce112b1f568";
+      :set vendor ([ / tool fetch mode=https check-certificate=yes-without-crl \
+         url=("https://api.macvendors.com/" . $mac) output=user as-value ]->"data");
+    } on-error={
+      :set vendor "unknown vendor";
+    }
+    :local message ("unknown MAC address " . $mac . " (" . $vendor . ", " . $hostname . ") " . \
+      "first seen on " . $datetime . " connected to SSID " . $ssid . ", interface " . $interface);
     / log info $message;
     / interface wireless access-list add place-before=$"place-before" comment=$message mac-address=$mac disabled=yes;
     $SendNotification ($mac . " connected to " . $ssid) \
@@ -46,6 +55,7 @@
         "Interface:  " . $interface . "\n" . \
         "SSID:       " . $ssid . "\n" . \
         "MAC:        " . $mac . "\n" . \
+        "Vendor:     " . $vendor . "\n" . \
         "Hostname:   " . $hostname . "\n" . \
         "Address:    " . $address . "\n" . \
         "Date:       " . $datetime);