Hi, I got a "0x07ff" protocol value when I used wireshark to collect net packet info. I don't know what does this value "0x07ff" mean. I search it in the IANA, and found there is not a protocol value like this. who can tell me. or It just mean a undefined protocol? asked 27 Jan '15, 00:07  itachi007 |
One Answer:
Since the "protocol" field at the IP layer is an 8-bit field, I assume that by "protocol" you mean "Ethertype". Then it looks like 0x07ff is being used by DynaCore, see: https://www12.informatik.uni-erlangen.de/spprr/colloquium06/DynaCore_Muenchen.pdf Is it feasible that you have DynaCore traffic in your network (I did not really dig into the protocol, just found it on google). If not, can you share a little capture file on www.cloudshark.org? If you did not mean "Ethertype", then please tell us which "protocol" field you are referring to. answered 27 Jan '15, 02:43  SYN-bit ♦♦ |
