Security Incidents mailing list archives
Re: Ether Broadcast
From: Blair Strang <Blair.Strang () chelmer co nz>
Date: Wed, 20 Dec 2000 09:47:17 +1300
Are you running MS load balancing stuff anywheres? 1. http://standards.ieee.org/regauth/ethertype/type-pub.html (Look for 886f) 2. http://www.microsoft.com/TechNet/win2000/nlbovw.asp "Network Load Balancing's heartbeat messages are assigned an ether type-value of hexadecimal 886F." Regards, Blair. On 2000.12.20 07:29:20 +1300 "Guins, Shawn (US - Dallas)" wrote:
Hello all- I've noticed unusual Ether Broadcast on my internal network.
<snip>
EtherPeek Decoded Packet File Saved: Tue Dec 19 10:55:13 2000 Packet #5655 Flags: 0x00 Status: 0x00 Packet Length:1514 Timestamp: 10:51:30.038601 12/19/2000 Ethernet Header Destination: ff:ff:ff:ff:ff:ff Ethernet Broadcast Source: 02:01:00:00:00:00 Protocol Type:88-6f Packet Data:
<snip> -- Silly is a state of mind, stupid is a way of life. -- The information contained in this e-mail and any attachments is confidential and is intended for the attention and use of the named addressee(s) only. Any views expressed in this message are those of the individual sender and may not necessarily reflect the views of Chelmer Limited.
Current thread:
- Ether Broadcast Guins, Shawn (US - Dallas) (Dec 19)
- Re: Ether Broadcast Ryan Russell (Dec 19)
- Re: Ether Broadcast Blair Strang (Dec 19)
- <Possible follow-ups>
- Re: Ether Broadcast Jeff (Dec 19)