Log for firewall reports address in lowercase
> /log/print
....firewall,info ... src-mac f0:b3:ec:1b:42:21, ...
when other service like /ip/arp or /ip/dehc-server/ease use UPPERCASE
[admin@MikroTik] /ip/arp> print where mac-address=f0:b3:ec:1b:42:21
[admin@MikroTik] /ip/arp> print where mac-address=F0:B3:EC:1B:42:21
Flags: D, P - PUBLISHED
Columns: ADDRESS, MAC-ADDRESS, INTERFACE
# ADDRESS MAC-ADDRESS INTERFACE
18 D 10.10.1.10 F0:B3:EC:1B:42:21 bridge-tv
Of course, I can make the where more complex, but it would be great to be coherent between parts of the same system.
An alternative is to make “where comparaisons” case insensitive for mac-address fields