Mark Landin ([log in to unmask]) wrote:
: What is the 4-digit Ethernet pakcet header ID for AFCP and ADCP?
: We are trying to do some filtering on our Ethernet switch ports and
: need this info. I can't find it anywhere. If you are not sure what I'm
: talking about, the ID for TCP/IP is 0800 and for HP Probe it is 8005.
 
- Are you sure you're talking about probe over ethernet?  I have heard
  some rumblings about some vendors (including HP and IBM) doing ARP
  over IEEE802.2/802.3 (which already is funny enough)...  but HP probe
  over Ethernet...?  This is what one sample probe packet looks like
  on my system and this is over IEEE802.3 - I do not know what do you
  mean with the 4-digit Ethernet pakcet header ID for HP Probe being 8005.
 
Data in hex and ASCII:
 
       00   02   04   06   08   0A   0C   0E
00000: 0900 0900 0001 0800 0903 9AB2 001A FCFC   ................
00010: 0300 0000 0503 0503 0011 0010 BCD0 0008   ................
00020: 0006 0001 0F3D AFFF 0000 4500 006C A45D   .....=....E..l.]
00030: 0000 4011 0000 0F3D A85B 0FFF             ..@....=.[..
 
 
  Usually probe runs over IEEE802.2/802.3 and if that's the case you're dealing
  with, then you'll need to do more than just look into the 4-digit field
  that identifies ethernet packets.  If I'm missing something, please explain.
 
  For AFCP/ADCP, there's no ethernet type field as far as I know.  To my
  knowledge it only runs over IEEE802.2/802.3 and in order to decode what
  protocol the packet is going to, you'll have to decode the IEEE802.2
  header first (level 2 header, that does not exist in ethernet).  Within
  the IEEE802.2 header there are SSAP/DSAP fields and the XDSAP fields
  that will further qualify who the packet is for.
 
 
Cheers,
:-)  Eero Laurila - HP CSY Networking lab, NS services, VT.