Ethereal-users: Re: [Ethereal-users] strange LOOP packets

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Thu, 23 Sep 2004 10:30:02 -0700
Matt_Becker@xxxxxxxxxxx wrote:

Since some weeks I'm discovering a strange type of packets on my
network. All these packets are of type=0x900 LOOP

Presumably you mean 0x9000.

with a size of 46
bytes. The really strange thing is, that eth source and destination are
the same (different 3com and dell nic's).

I'd really appreciate any kind of hint or answer to my question as the
number of these packtes seem to grow with time and I can't find anything
about this on the net.

According to a comment in the Ethereal source:

$ egrep LOOP *.h
etypes.h:#ifndef ETHERTYPE_LOOP
etypes.h:#define ETHERTYPE_LOOP 0x9000 /* used for layer 2 testing (do i see my own frames on the wire) */

I assume there's a spec *somewhere* for this, perhaps in the 802.3 spec.