802.2 frames with DSAP 0xE0

Thread View: comp.dcom.lans.misc

4 messages

[T] Back to Threads [V] Tree View [G] Group Articles

4 total messages Started by Per Andersson Thu, 21 Jan 1993 20:36

#316

Author: Per Andersson
Date: Thu, 21 Jan 1993 20:36

19 lines
1241 bytes

Hi.

I have started to monitor our Token-Ring traffic in addition
to the ethernet, and in the process I have had start modifying
tcpdump for recognising 802.2 frames. SNAP-frames seems quite
easy, but there are some other frames on the net I can`t find
out what they are. Most of them have a DSAP and SSAP that has
a value of 'E0'. That is - the first two bytes in the 802.2
frame are E0E0. I have read RFC1340, which has a list off known
DSAPs and SSAPs, and 'E0' is not one of them. Anybody able to
help me ?

/Per
-- 
-----------------------------------------------------------------------------
Per Andersson - ppan@nobeltech.se (perand@stacken.kth.se on free time)
Managing networks at, but not speaking for Nobeltech AB, J{rf{lla, Sweden
-----------------------------------------------------------------------------

Re: 802.2 frames with DSAP 0xE0

#317

Author: harvey
Date: Fri, 22 Jan 1993 03:00

22 lines
1512 bytes

In article <1993Jan21.203623.7308@nobeltech.se>, ppan@nobeltech.se (Per Andersson) writes:
>
> Hi.
>
> I have started to monitor our Token-Ring traffic in addition
> to the ethernet, and in the process I have had start modifying
> tcpdump for recognising 802.2 frames. SNAP-frames seems quite
> easy, but there are some other frames on the net I can`t find
> out what they are. Most of them have a DSAP and SSAP that has
> a value of 'E0'. That is - the first two bytes in the 802.2
> frame are E0E0. I have read RFC1340, which has a list off known
> DSAPs and SSAPs, and 'E0' is not one of them. Anybody able to
> help me ?

These are IPX packets (Novell NetWare).  Check the first two bytes of the
packet data; it will always be FFFF (IPX checksumming disabled).

Novell's new ODI drivers support SNAP encapsulation for IPX.  It's not very
common though (for example, I know Cisco routers don't support it).
--
James Harvey    IUPUI/OIT Technical Support/VMS & Networks
harvey@iupui.edu  uucp:iugate!harvey  bitnet:harvey@indyvax

Re: 802.2 frames with DSAP 0xE0

#320

Author: Thomas Ruf
Date: Fri, 22 Jan 1993 19:24

8 lines
620 bytes

ppan@nobeltech.se (Per Andersson) writes:
>out what they are. Most of them have a DSAP and SSAP that has
>a value of 'E0'. 
Novell NetWare uses E0 as SSAP/DSAP for the IPX protocol.

Thomas
-- 
Thomas Ruf	tom@rsp.de	Schneider & Koch GmbH

Re: 802.2 frames with DSAP 0xE0

#331

Author: Samuel Lam
Date: Tue, 26 Jan 1993 12:19

11 lines
760 bytes

In article <1993Jan21.203623.7308@nobeltech.se>, ppan@nobeltech.se
 (Per Andersson) wrote:
>I have read RFC1340, which has a list off known DSAPs and SSAPs,
>and 'E0' is not one of them.

It's for Novell's IPX protocol.  Typically used between Novell NetWare
file servers and their PC clients.

...Sam
-- 
<skl@wimsey.bc.ca> -- Connectivity Technology Inc.

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads