wireshark/wka.tmpl
Jörg Mayer 3f8354909c Jaap Keuter:
I've captured a Direct Cable Connection on a WinXP machine (see
http://wiki.ethereal.com/SampleCaptures?action=AttachFile&do=get&target=PPP-config.cap).
The thing is that the capture lib(?) creates fake Ethernet headers for
the PPP LCP and NCP packets. These contain " SEND#" or " RECV#" as both
source and destination address, where "#" seems to be a session number
based on modem control signals(?).

Anyway, to make more sense of the direction these PPP frames are going
I've added them to the address resolution file, as per attached patch.


svn path=/trunk/; revision=16949
2006-01-05 08:33:53 +00:00

211 lines
8.9 KiB
Cheetah

#
# Well-known addresses.
#
# $Id$
#
# Ethereal - Network traffic analyzer
# By Gerald Combs <gerald [AT] ethereal.com>
# Copyright 1998 Gerald Combs
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
#
# The data below has been assembled from the following sources:
#
# Michael Patton's "Ethernet Codes Master Page" available from:
# <http://www.cavebear.com/CaveBear/Ethernet/>
# <ftp://ftp.cavebear.com/pub/Ethernet.txt>
#
# Microsoft Windows 2000 Server
# Operating System
# Network Load Balancing Technical Overview
# White Paper
#
00-00-0C-07-AC/40 All-HSRP-routers
00-00-5E-00-01/40 IETF-VRRP-virtual-router-VRID
00-BF-00-00-00-00/16 MS-NLB-VirtServer
00-E0-2B-00-00-00 Extreme-EDP
00-E0-2B-00-00-01 Extreme-EAPS-Source
00-E0-2B-00-00-02 Extreme-ESRP-Client
00-E0-2B-00-00-04 Extreme-EAPSv1
00-E0-2B-00-00-08 Extreme-ESRP-Master
01-00-0C-00-00/40 ISL-Frame
01-00-0C-CC-CC-CC CDP/VTP
01-00-0C-DD-DD-DD CGMP
01-00-10-00-00-20 Hughes-Lan-Systems-Terminal-Server-S/W-download
01-00-10-FF-FF-20 Hughes-Lan-Systems-Terminal-Server-S/W-request
01-00-1D-00-00-00 Cabletron-PC-OV-PC-discover-(on-demand)
01-00-1D-00-00-05 Cabletron-PVST-BPDU
01-00-1D-00-00-06 Cabletron-QCSTP-BPDU
01-00-1D-42-00-00 Cabletron-PC-OV-Bridge-discover-(on-demand)
01-00-1D-52-00-00 Cabletron-PC-OV-MMAC-discover-(on-demand)
01-00-3C Auspex-Systems-(Serverguard)
01-00-81-00-00-00 Synoptics-Network-Management
01-00-81-00-00-02 Synoptics-Network-Management
01-00-81-00-01-00 Bay-Networks-(Synoptics)-autodiscovery
01-00-81-00-01-01 Bay-Networks-(Synoptics)-autodiscovery
01-20-25/25 Control-Technology-Inc's-Industrial-Ctrl-Proto.
01-80-24-00-00-00 Kalpana-Etherswitch-every-60-seconds
01-80-C2-00-00-00/44 Spanning-tree-(for-bridges)
01-80-C2-00-00-02 Slow-Protocols
01-80-C2-00-00-0E LLDP_Multicast
01-80-C2-00-00-10 Bridge-Management
01-80-C2-00-00-11 Load-Server
01-80-C2-00-00-12 Loadable-Device
01-80-C2-00-00-14 ISIS-all-level-1-IS's
01-80-C2-00-00-15 ISIS-all-level-2-IS's
01-80-C2-00-01-00 FDDI-RMT-Directed-Beacon
01-80-C2-00-01-10 FDDI-status-report-frame
01-DD-00-FF-FF-FF Ungermann-Bass-boot-me-requests
01-DD-01-00-00-00 Ungermann-Bass-Spanning-Tree
01-E0-52-CC-CC-CC Foundry-DP
# Microsoft Network Load Balancing (NLB)
# Actually, 02-01-virtualip to 02-20-virtualip will be used from server to rest-of-world
# 02-bf-virtualip will be used from rest-of-world to server
02-BF-00-00-00-00/16 MS-NLB-VirtServer
02-01-00-00-00-00/16 MS-NLB-PhysServer-01
02-02-00-00-00-00/16 MS-NLB-PhysServer-02
02-03-00-00-00-00/16 MS-NLB-PhysServer-03
02-04-00-00-00-00/16 MS-NLB-PhysServer-04
02-05-00-00-00-00/16 MS-NLB-PhysServer-05
02-06-00-00-00-00/16 MS-NLB-PhysServer-06
02-07-00-00-00-00/16 MS-NLB-PhysServer-07
02-08-00-00-00-00/16 MS-NLB-PhysServer-08
02-09-00-00-00-00/16 MS-NLB-PhysServer-09
02-0a-00-00-00-00/16 MS-NLB-PhysServer-10
02-0b-00-00-00-00/16 MS-NLB-PhysServer-11
02-0c-00-00-00-00/16 MS-NLB-PhysServer-12
02-0d-00-00-00-00/16 MS-NLB-PhysServer-13
02-0e-00-00-00-00/16 MS-NLB-PhysServer-14
02-0f-00-00-00-00/16 MS-NLB-PhysServer-15
02-10-00-00-00-00/16 MS-NLB-PhysServer-16
02-11-00-00-00-00/16 MS-NLB-PhysServer-17
02-12-00-00-00-00/16 MS-NLB-PhysServer-18
02-13-00-00-00-00/16 MS-NLB-PhysServer-19
02-14-00-00-00-00/16 MS-NLB-PhysServer-20
02-15-00-00-00-00/16 MS-NLB-PhysServer-21
02-16-00-00-00-00/16 MS-NLB-PhysServer-22
02-17-00-00-00-00/16 MS-NLB-PhysServer-23
02-18-00-00-00-00/16 MS-NLB-PhysServer-24
02-19-00-00-00-00/16 MS-NLB-PhysServer-25
02-1a-00-00-00-00/16 MS-NLB-PhysServer-26
02-1b-00-00-00-00/16 MS-NLB-PhysServer-27
02-1c-00-00-00-00/16 MS-NLB-PhysServer-28
02-1d-00-00-00-00/16 MS-NLB-PhysServer-29
02-1e-00-00-00-00/16 MS-NLB-PhysServer-30
02-1f-00-00-00-00/16 MS-NLB-PhysServer-31
02-20-00-00-00-00/16 MS-NLB-PhysServer-32
# [ The following block of addresses (03-...) are used by various ]
# [ standards. Some (marked [TR?]) are suspected of only being ]
# [ used on Token Ring for group addresses of Token Ring specific ]
# [ functions, reference ISO 8802-5:1995 aka. IEEE 802.5:1995 for ]
# [ some info. These in the Ethernet order for this list. On ]
# [ Token Ring they appear reversed. They should never appear on ]
# [ Ethernet. Others, not so marked, are normal reports (may be ]
# [ seen on either).
03-00-00-00-00-01 NETBIOS-# [TR?]
03-00-00-00-00-02 Locate-Directory-Server # [TR?]
03-00-00-00-00-04 Synchronous-Bandwidth-Manager-# [TR?]
03-00-00-00-00-08 Configuration-Report-Server-# [TR?]
03-00-00-00-00-10 Ring-Error-Monitor-# [TR?]
03-00-00-00-00-10 (OS/2-1.3-EE+Communications-Manager)
03-00-00-00-00-20 Network-Server-Heartbeat-# [TR?]
03-00-00-00-00-40 (OS/2-1.3-EE+Communications-Manager)
03-00-00-00-00-80 Active-Monitor # [TR?]
03-00-00-00-01-00 OSI-All-IS-Token-Ring-Multicast
03-00-00-00-02-00 OSI-All-ES-Token-Ring-Multicast
03-00-00-00-04-00 LAN-Manager # [TR?]
03-00-00-00-08-00 Ring-Wiring-Concentrator # [TR?]
03-00-00-00-10-00 LAN-Gateway # [TR?]
03-00-00-00-20-00 Ring-Authorization-Server # [TR?]
03-00-00-00-40-00 IMPL-Server # [TR?]
03-00-00-00-80-00 Bridge # [TR?]
03-00-00-20-00-00 IP-Token-Ring-Multicast (RFC1469)
03-00-00-80-00-00 Discovery-Client
03-00-C7-00-00-EE HP (Compaq) ProLiant NIC teaming
03-00-FF-FF-FF-FF All-Stations-Address
03-BF-00-00-00-00/16 MS-NLB-VirtServer-Multicast
09-00-07-00-00-00/40 AppleTalk-Zone-multicast-addresses
# only goes through 09-00-07-00-00-FC?
09-00-07-FF-FF-FF AppleTalk-broadcast-address
09-00-09-00-00-01 HP-Probe
09-00-09-00-00-04 HP-DTC
09-00-0D-00-00-00/24 ICL-Oslan-Multicast
09-00-0D-02-00-00 ICL-Oslan-Service-discover-only-on-boot
09-00-0D-02-0A-38 ICL-Oslan-Service-discover-only-on-boot
09-00-0D-02-0A-39 ICL-Oslan-Service-discover-only-on-boot
09-00-0D-02-0A-3C ICL-Oslan-Service-discover-only-on-boot
09-00-0D-02-FF-FF ICL-Oslan-Service-discover-only-on-boot
09-00-0D-09-00-00 ICL-Oslan-Service-discover-as-required
09-00-1E-00-00-00 Apollo-DOMAIN
09-00-2B-00-00-00 DEC-MUMPS?
09-00-2B-00-00-01 DEC-DSM/DDP
09-00-2B-00-00-02 DEC-VAXELN?
09-00-2B-00-00-03 DEC-Lanbridge-Traffic-Monitor-(LTM)
09-00-2B-00-00-04 DEC-MAP-(or-OSI?)-End-System-Hello?
09-00-2B-00-00-05 DEC-MAP-(or-OSI?)-Intermediate-System-Hello?
09-00-2B-00-00-06 DEC-CSMA/CD-Encryption?
09-00-2B-00-00-07 DEC-NetBios-Emulator?
09-00-2B-00-00-0F DEC-Local-Area-Transport-(LAT)
09-00-2B-00-00-10/44 DEC-Experimental
09-00-2B-01-00-00 DEC-LanBridge-Copy-packets-(All-bridges)
09-00-2B-01-00-01 DEC-LanBridge-Hello-packets-(All-local-bridges)
09-00-2B-02-00-00 DEC-DNA-Level-2-Routing-Layer-routers?
09-00-2B-02-01-00 DEC-DNA-Naming-Service-Advertisement?
09-00-2B-02-01-01 DEC-DNA-Naming-Service-Solicitation?
09-00-2B-02-01-09 DEC-Availability-Manager-for-Distributed-Systems-DECamds
09-00-2B-02-01-02 DEC-Distributed-Time-Service
09-00-2B-03-00-00/32 DEC-default-filtering-by-bridges?
09-00-2B-04-00-00 DEC-Local-Area-System-Transport-(LAST)?
09-00-2B-23-00-00 DEC-Argonaut-Console?
09-00-4C-00-00-00 BICC-802.1-management
09-00-4C-00-00-02 BICC-802.1-management
09-00-4C-00-00-06 BICC-Local-bridge-STA-802.1(D)-Rev6
09-00-4C-00-00-0C BICC-Remote-bridge-STA-802.1(D)-Rev8
09-00-4C-00-00-0F BICC-Remote-bridge-ADAPTIVE-ROUTING
09-00-56-FF-00-00/32 Stanford-V-Kernel,-version-6.0
09-00-6A-00-01-00 TOP-NetBIOS.
09-00-77-00-00-00 Retix-Bridge-Local-Management-System
09-00-77-00-00-01 Retix-spanning-tree-bridges
09-00-77-00-00-02 Retix-Bridge-Adaptive-routing
09-00-7C-01-00-01 Vitalink-DLS-Multicast
09-00-7C-01-00-03 Vitalink-DLS-Inlink
09-00-7C-01-00-04 Vitalink-DLS-and-non-DLS-Multicast
09-00-7C-02-00-05 Vitalink-diagnostics
09-00-7C-05-00-01 Vitalink-gateway?
09-00-7C-05-00-02 Vitalink-Network-Validation-Message
09-00-87-80-FF-FF Xyplex-Terminal-Servers
09-00-87-90-FF-FF Xyplex-Terminal-Servers
0C-00-0C-00-00/40 ISL-Frame
0D-1E-15-BA-DD-06 HP
20-52-45-43-56-00/40 Receive
20-53-45-4E-44-00/40 Send
33-33-00-00-00-00/16 IPv6-Neighbor-Discovery
AA-00-03-00-00-00/32 DEC-UNA
AA-00-03-01-00-00/32 DEC-PROM-AA
AA-00-03-03-00-00/32 DEC-NI20
AB-00-00-01-00-00 DEC-MOP-Dump/Load-Assistance
AB-00-00-02-00-00 DEC-MOP-Remote-Console
AB-00-00-03-00-00 DECNET-Phase-IV-end-node-Hello-packets
AB-00-00-04-00-00 DECNET-Phase-IV-Router-Hello-packets
AB-00-03-00-00-00 DEC-Local-Area-Transport-(LAT)-old
AB-00-04-01-00-00/32 DEC-Local-Area-VAX-Cluster-groups-SCA
CF-00-00-00-00-00 Ethernet-Configuration-Test-protocol-(Loopback)
FF-FF-00-60-00-04 Lantastic
FF-FF-00-40-00-01 Lantastic
FF-FF-01-E0-00-04 Lantastic
FF-FF-FF-FF-FF-FF Broadcast