Ethereal-users: Re: [Ethereal-users] Ethernet II In Info field.

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Mon, 11 Nov 2002 08:42:04 -0800
On Mon, Nov 11, 2002 at 04:16:43PM +0100, Per Nilsson �stersund wrote:
> I'm looking at a log that I cannot figure out.
> Some packets does not decode well:
> in protocol column there are number, like: 0x24cb
> and in Info column it says: Ethernet II

The number is the Ethernet type field value in the packet.

That means that the packet is an Ethernet packet (in Digital/Intel/Xerox
form, with the type/length field containing a type value, rather than in
802.3 form, with the type/length field containing a length value), with
a type field value equal to the number in the protocol column.

Ethereal does not dissect every single protocol for which there's a type
field value; many of them are undocumented.

> What is this anyone got a clue ????

I have no clue what protocol an Ethernet type field value of 24cb is for.

The list of type field values at

	http://www.iana.org/assignments/ethernet-numbers

doesn't list 24cb, nor does the list at

	http://www.cavebear.com/CaveBear/Ethernet/type.html

nor does the IEEE list at

	http://standards.ieee.org/regauth/ethertype/type-pub.html

and a Google search for

	Ethernet 24cb -pci

("-pci" because it appears that some Intel Ethernet device may have a
PCI device code of 24cb) didn't find anything.

Perhaps somebody else knows what protocol that type value is for.