Ethereal-dev: Re: [ethereal-dev] IPX and 802.3, NetBEUI, etc

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Gilbert Ramirez <gram@xxxxxxxxxx>
Date: Sat, 25 Sep 1999 22:32:08 -0500
On Sun, Sep 26, 1999 at 01:39:51PM +0900, Richard Sharpe wrote:
> Hi,
> 
> for a project that I am engaged on (the next Samba book-an 800-page
> monster) I am in need of some information and clarification.
> 
> For example, I have heard funny things about IPX, that it was raw 802.3
> etc, without LLC (802.2) etc.

IPX can be transmitted 4 ways over ethernet. I put the Novell terminology in
packet-eth.c:

ETHERNET_II: Uses a "type" field of 0x8137 to designate that the payload is IPX.
ETHERNET_802_2: Ethernet with LLC, DSAP/SSAP for IPX is: 0xe0 0xe0
ETHERNET_802_3: A raw ethernet frame. If the first two data bytes are 0xff 0xff,
	then the payload is IPX.
ETHERNET_SNAP: Ethernet with LLC; LLC happens to be SNAP, with type 0x8137.

All four can be used at once! For token-ring, NetWare can use
Token-ring with LLC (0x8137), or with LLC/SNAP.

A good description of this is in "Novell's Guide to NetWare LAN Analysis",
by Laura A.  Chappell and Dan E. Hakes,  ISBN: 0-7821-1362-1.
It also has a lot of good sections on token-ring in general.

> Also, does anyone have any information on the original IBM PC Network
> Program? NetBEUI? etc ... I am seeking to verify some of my views.

Not here...

> Since I need to use Ethereal to demonstrate lots of parts of the SMB
> protocol, I guess I better get more of it decoded as well.

Ethereal screen shots in your next book? :-)

--gilbert