Ethereal-dev: Re: [Ethereal-dev] New Dissector: ISMP/EDP (Enterasys DiscoveryProtocol)

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Fri, 2 Jan 2004 15:35:59 -0800
On Fri, Jan 02, 2004 at 11:58:17PM +0100, Martin Regner wrote:
> Hi,
> 
> When comparing to RFC 2641 it looks like a VLanHello Interswitch keepalive
> more or less if you remove the first three octets and except for the ending
> of the frame which seems to not be according to the specification.
> 
> 
> 00 03     ISMP version: 3
> 
> 00 02     ISMP MessageType:  VLANHello Interswitch keepalive
> 
> 99 de     Sequence number : 99de (this one changed between packets)
> 
> 10         Code length: 16 bytes
> 
> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    Authentication code:  16
> bytes
> 
> 00 04    Version: 4
> 
> 98 94 90 1b     Switch-ip-address : 152.148.144.27
> 
> 00 00 1d f0 94 ae 06 00 00 00     Switch-ID:  (6 byte Cabletron
> 00-00-1d-xx-xx-xx mac address + logical port number )
> 
> 00 00 1d bf b0 ee   Chassi mac address: (6 byte Cabletron 00-00-1d-xx-xx-xx
> mac address)
> 
> 00 00 00 00   Chassi ip-address: 0.0.0.0
> 
> 00 02     Swtich type: SFVLAN switch
> 
> 04 00 08 00    Functional level :  ?????  Doesn't match the specification I
> looked at

Hmm.

Could this be some form of bridging?