Security Incidents mailing list archives

Re: Ether Broadcast


From: Blair Strang <Blair.Strang () chelmer co nz>
Date: Wed, 20 Dec 2000 09:47:17 +1300

Are you running MS load balancing stuff anywheres?

1. http://standards.ieee.org/regauth/ethertype/type-pub.html
   (Look for 886f)

2. http://www.microsoft.com/TechNet/win2000/nlbovw.asp
   "Network Load Balancing's heartbeat messages are assigned an ether
    type-value of hexadecimal 886F."


Regards,

    Blair.


On 2000.12.20 07:29:20 +1300 "Guins, Shawn (US - Dallas)" wrote:
Hello all-
I've noticed unusual Ether Broadcast on my internal network.

<snip>


EtherPeek Decoded Packet File
Saved: Tue Dec 19 10:55:13 2000

Packet #5655
  Flags:        0x00
  Status:       0x00
  Packet Length:1514
  Timestamp:    10:51:30.038601 12/19/2000
Ethernet Header
  Destination:  ff:ff:ff:ff:ff:ff Ethernet Broadcast
  Source:       02:01:00:00:00:00
  Protocol Type:88-6f
  Packet Data:

<snip>

--
Silly is a state of mind, stupid is a way of life.


--
The information contained in this e-mail and any attachments is confidential
and is intended for the attention and use of the named addressee(s) only.
Any views expressed in this message are those of the individual sender and
may not necessarily reflect the views of Chelmer Limited.


Current thread: