andrewpiroli/batch-mac-tracer

Locate MAC addresses to their source ports in bulk

Batch MAC Tracer

Find the switchport of MAC addresses on your network. Currently 2 plugins are available for discovery:

• LibreNMS - new system that uses LibreNMS to find ports, a work in progress still
• CiscoSSH - SSH screen scraping based. It's old reliable but has restrictions on when it can be used

Requirements and Limitations

• Python >= 3.8

Requirements for LibreNMS Plugin

• requests library (install via pip install requests)
• A working LibreNMS installation with API access
• The port you're looking for must be polled by LibreNMS
• Work in progress, may return incorrect results

Requirements and Limitations for CiscoSSH Plugin

• netmiko library (install via pip install netmiko)
• Not L3 aware, will not cross an L3 boundry under any circumstancs
• Only works with Cisco IOS(-XE) switches due to fragile screen scaping templates and hardcoded console commands

batch-mac-tracer's Issues

Assumes logon directly to privileged mode

Investigate if elevation is needed for our commands (probably), if so, we should elevate.
Unconditional elevation is probably fine, it's rare to have that little privilege.

Parser: Static Etherchannels are ignored.

Currently the parser will skip any EtherChannel bundles that are not LACP or PaGP. Using a static EtherChannel, while stupid, is a valid configuration and the parser should support it.

https://github.com/AndrewPiroli/Cisco-Batch-MAC-Tracer/blob/a4386fd228e79365e9981316514a52a345f67ffc/tracemac_parser.py#L305

Enable password assumed to be the same as logon password

If the enable password is needed, it's supplied the logon password, with no chance for the user to override this behavior in any way.

Only works with Cisco IOS/IOS-XE

• Device type hardcoded to cisco_ios
• Uses show mac address-table
• Uses show cdp neighbors detail
• Uses show etherchannel summary
• No LLDP support

CDP Table Parser does not handle reposonse that doesn't include "Unidrectional Mode" output

The "Unidirectional Mode" is part of the regex that defines the start and end of each CDP Table entry, on devices that don't output this, the parsed CDP table is blank, stopping all traces short even if they should continue