I've captured a Direct Cable Connection on a WinXP machine (see
http://wiki.ethereal.com/SampleCaptures?action=AttachFile&do=get&target=PPP-config.cap).
The thing is that the capture lib(?) creates fake Ethernet headers for
the PPP LCP and NCP packets. These contain " SEND#" or " RECV#" as both
source and destination address, where "#" seems to be a session number
based on modem control signals(?).
Anyway, to make more sense of the direction these PPP frames are going
I've added them to the address resolution file, as per attached patch.
svn path=/trunk/; revision=16949
I'm seeing a variant of the registered Ethernet address for MS NLB
multicast being used.
Changed to remove "multicast" from the name as it isn't a multicast
address.
svn path=/trunk/; revision=16823
(aka: don't modify manuf, change manuf.tmpl and wka.tmpl instead)
- Remove OUI 08:00:0F from manuf.tmpl, the IEEE provides the correct
value by now.
- Regenerate manuf
svn path=/trunk/; revision=13608
they have LF at the end of the line on UN*X and CR/LF on Windows;
hopefully this means that if a CR/LF version is checked in on Windows,
the CRs will be stripped so that they show up only when checked out on
Windows, not on UN*X.
svn path=/trunk/; revision=11400
Don't print Cavebear skipped - it makes the output unusable.
manuf.tmpl:
Remove entries that overwrite identical or similar results from IEEE
manuf:
Rebuild to reflect the changes in manuf.tmpl and add some new IEEE
entries.
svn path=/trunk/; revision=7447
Sometimes printed a \n too much
manuf.tmpl:
Remove most manual Mappings to Cisco because that's what gets used
anyway (all except Racal and Newpoint)
manuf:
Update to represent changes in make-manuf, manuf.tmpl and IEEE
svn path=/trunk/; revision=7422
ranges specified with a mask, as well as manufacturer OUIs. Match the
address range values, as well as MAC addresses and manufacturer OUIs,
when translating MAC addresses to names.
Have "make-manuf" read a file containing the well-known addresses and
append it to the list of OUIs.
svn path=/trunk/; revision=6233
Jörg Mayer