[c-nsp] unknown ethertype 0x200e

Nick Hilliard nick at inex.ie
Sun Nov 8 16:16:59 EST 2009


On 07/11/2009 21:13, Kevin Loch wrote:
> Does anyone know what this might be, from a routed interface
> on SRD3:
>
> 15:00:18.774808 00:02:fc:c1:0d:b2 > 00:00:00:00:02:02, ethertype Unknown
> (0x200e), length 78:
> 0x0000: 0001 0203 0405 0607 0809 0a0b 0c0d 0e0f ................
> 0x0010: 1011 1213 1415 1617 1819 1a1b 1c1d 1e1f ................
> 0x0020: 2021 2223 2425 2627 2829 2a2b 2c2d 2e2f .!"#$%&'()*+,-./
> 0x0030: 3031 3233 3435 3637 3839 3a3b 3c3d 3e3f 0123456789:;<=>?
>
> I'd like to know what knob to use to turn it off. Google didn't turn up
> anything helpful.

Looks like junk traffic to me.  Might be worth opening up a TAC case: the 
payload looks peculiar and as you note, the ethertype is unknown.  The 
destination mac address also looks odd.

Nick


More information about the cisco-nsp mailing list