I've captured a Direct Cable Connection on a WinXP machine (see
http://wiki.ethereal.com/SampleCaptures?action=AttachFile&do=get&target=PPP-config.cap).
The thing is that the capture lib(?) creates fake Ethernet headers for
the PPP LCP and NCP packets. These contain " SEND#" or " RECV#" as both
source and destination address, where "#" seems to be a session number
based on modem control signals(?).
Anyway, to make more sense of the direction these PPP frames are going
I've added them to the address resolution file, as per attached patch.
svn path=/trunk/; revision=16949
I'm seeing a variant of the registered Ethernet address for MS NLB
multicast being used.
Changed to remove "multicast" from the name as it isn't a multicast
address.
svn path=/trunk/; revision=16823
Remove IETF-VRRP: This is a generic multicast address, and there are 31
other IP-multicast addresses mapping to the same mac address.
svn path=/trunk/; revision=16741
they have LF at the end of the line on UN*X and CR/LF on Windows;
hopefully this means that if a CR/LF version is checked in on Windows,
the CRs will be stripped so that they show up only when checked out on
Windows, not on UN*X.
svn path=/trunk/; revision=11400
ranges specified with a mask, as well as manufacturer OUIs. Match the
address range values, as well as MAC addresses and manufacturer OUIs,
when translating MAC addresses to names.
Have "make-manuf" read a file containing the well-known addresses and
append it to the list of OUIs.
svn path=/trunk/; revision=6233
Jörg Mayer