detect vendor mac prefixes