does anyone have a query to pull the mac address of the default network interface for windows + mac

I guess something like this

select mac FROM interface_details WHERE interface = (select interface FROM routes WHERE destination = '0.0.0.0');

works

gotcha, getting an error on that query specifically,

Query Execution Failed : Scalar sub-query has returned multiple rows

i follow the logic though

this query returns more then one interface ? select interface from routes WHERE destination = "0.0.0.0";

yea for sure, 105k rows

but all destination to 0.0.0.0 ?

If you wanted to take a more naive/brittle approach you could try the following, it's far from perfect but might get you closer:

SELECT interface, mac, platform, 
CASE 
  WHEN platform = 'windows' THEN MAX(dhcp_lease_obtained)
  WHEN platform = 'darwin' THEN MAX(ibytes)
  END AS max_column
FROM interface_details, os_version;

hah interesting, i was wondering how one might infer based on the available fields

this has some pretty crappy pre-baked assumptions which could lead to mixups such as using MAX(ibytes) which could be wrong if you recently switched from LAN wired connection to wifi.