From 85bf0db0a3b577dd009cb43117524c103ae38ad2 Mon Sep 17 00:00:00 2001
From: rnhmjoj <rnhmjoj@inventati.org>
Date: Tue, 7 Mar 2023 18:18:46 +0100
Subject: [PATCH] scripts/scan.awk: add script to scan IPv6 link local

---
 scripts/scan.awk | 29 +++++++++++++++++++++++++++++
 1 file changed, 29 insertions(+)
 create mode 100644 scripts/scan.awk

diff --git a/scripts/scan.awk b/scripts/scan.awk
new file mode 100644
index 0000000..0ef7396
--- /dev/null
+++ b/scripts/scan.awk
@@ -0,0 +1,29 @@
+BEGIN {
+  "nix build -f '<nixpkgs>' nmap --no-link --json | jq -r '.[0].outputs.out'"|getline nmap
+  db = nmap"/share/nmap/nmap-mac-prefixes"
+  while((getline line < db) > 0)
+    {
+      n = split(line, rec, " ");
+      prefix = rec[1]
+      vendors[prefix] = rec[2]
+      for (i=3; i<n; i++)
+        vendors[prefix] = vendors[prefix]" "rec[i]
+    }
+  FS=" |%"
+}
+
+/ff:fe/ {
+  eui64 = $4
+  eui48 = eui64
+  gsub(/ff:fe|fe80::/, "", eui48)
+  gsub(":", "", eui48)
+  mac = xor(strtonum("0x"eui48), lshift(1, 41))
+  prefix = substr(sprintf("%X", mac), 0, 6)
+  mac = sprintf("%012x", mac)
+  prettymac = ""
+  for (i=0; i<=6; i++)
+  { prettymac = prettymac substr(mac,2*i+1,2)
+    if (i < 5) prettymac = prettymac":"
+  }
+  printf("%25s\t%s\t%s\n", eui64, prettymac, vendors[prefix])
+}