wka 11 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270
  1. #
  2. # Well-known addresses.
  3. #
  4. # Wireshark - Network traffic analyzer
  5. # By Gerald Combs <gerald [AT] wireshark.org>
  6. # Copyright 1998 Gerald Combs
  7. #
  8. # SPDX-License-Identifier: GPL-2.0-or-later
  9. #
  10. # The data below has been assembled from the following sources:
  11. #
  12. # Michael Patton's "Ethernet Codes Master Page" available from:
  13. # <http://www.cavebear.com/CaveBear/Ethernet/>
  14. # <ftp://ftp.cavebear.com/pub/Ethernet.txt>
  15. #
  16. # Microsoft Windows 2000 Server
  17. # Operating System
  18. # Network Load Balancing Technical Overview
  19. # White Paper
  20. #
  21. 00-00-00-00-FE-21 Checkpoint-Uninitialized-Cluster-Member
  22. 00-00-0C-07-AC/40 All-HSRP-routers
  23. 00-00-5E-00-01/40 IETF-VRRP-VRID
  24. 00-0C-0C-0C-0C-0C Cisco-ACI-Gleaning-Leaf
  25. 00-0D-0D-0D-0D-0D Cisco-ACI-Gleaning-Spine
  26. 00-BF-00-00-00-00/16 MS-NLB-VirtServer
  27. 00-E0-2B-00-00-00 Extreme-EDP
  28. # Extreme Encapsulation Protocol (basically EDP renamed)
  29. 00-E0-2B-00-00-01 Extreme-EEP
  30. 00-E0-2B-00-00-02 Extreme-ESRP-Client
  31. 00-E0-2B-00-00-04 Extreme-EAPS
  32. 00-E0-2B-00-00-06 Extreme-EAPS-SL
  33. 00-E0-2B-00-00-08 Extreme-ESRP-Master
  34. 01-00-0C-00-00/40 ISL-Frame
  35. 01-00-0C-CC-CC-CC CDP/VTP/DTP/PAgP/UDLD
  36. 01-00-0C-CC-CC-CD PVST+
  37. 01-00-0C-CD-CD-CD STP-UplinkFast
  38. 01-00-0C-CD-CD-CE VLAN-bridge
  39. 01-00-0C-CD-CD-D0 GBPT
  40. 01-00-0C-DD-DD-DD CGMP
  41. 01-00-10-00-00-20 Hughes-Lan-Systems-Terminal-Server-S/W-download
  42. 01-00-10-FF-FF-20 Hughes-Lan-Systems-Terminal-Server-S/W-request
  43. 01-00-1D-00-00-00 Cabletron-PC-OV-PC-discover-(on-demand)
  44. 01-00-1D-00-00-05 Cabletron-PVST-BPDU
  45. 01-00-1D-00-00-06 Cabletron-QCSTP-BPDU
  46. 01-00-1D-42-00-00 Cabletron-PC-OV-Bridge-discover-(on-demand)
  47. 01-00-1D-52-00-00 Cabletron-PC-OV-MMAC-discover-(on-demand)
  48. 01-00-3C Auspex-Systems-(Serverguard)
  49. 01-00-5E/25 IPv4mcast
  50. 01-00-81-00-00-00 Nortel-Network-Management
  51. 01-00-81-00-00-02 Nortel-Network-Management
  52. 01-00-81-00-01-00 Nortel-autodiscovery
  53. 01-00-81-00-01-01 Nortel-autodiscovery
  54. # Cisco Fabric Path
  55. 01-0F-FF-C1-01-C0 FP-Flood-to-all-VLANs
  56. 01-0F-FF-C1-02-C0 FP-Flood-to-all-Fabrics
  57. #
  58. # As per
  59. #
  60. # http://www.t11.org/ftp/t11/pub/fc/bb-5/08-334v0.pdf
  61. #
  62. # Broadcom "donated" one of their OUIs, 00-10-18, for use for
  63. # Fibre Channel over Ethernet, so we add entries for the
  64. # addresses in that document and a group of addresses for all
  65. # otherwise unlisted 01-10-18-XX-XX-XX addresses.
  66. #
  67. 01-10-18-01-00-00 All-FCoE-MACs
  68. 01-10-18-01-00-01 All-ENode-MACs
  69. 01-10-18-01-00-02 All-FCF-MACs
  70. 01-10-18-00-00-00/24 FCoE-group
  71. 01-11-1E-00-00-01 EPLv2_SoC
  72. 01-11-1E-00-00-02 EPLv2_PRes
  73. 01-11-1E-00-00-03 EPLv2_SoA
  74. 01-11-1E-00-00-04 EPLv2_ASnd
  75. 01-11-1E-00-00-05 EPLv2_AMNI
  76. 01-20-25/25 Control-Technology-Inc's-Industrial-Ctrl-Proto.
  77. 01-80-24-00-00-00 Kalpana-Etherswitch-every-60-seconds
  78. # IEEE 802.1Q-2018 Table 8-1, C-VLAN and MAC Bridge component Reserved addresses
  79. 01-80-C2-00-00-00/44 Spanning-tree-(for-bridges)
  80. # 01-80-C2-00-00-00 also: Nearest customer bridge
  81. 01-80-C2-00-00-01 MAC-specific-ctrl-proto-01
  82. 01-80-C2-00-00-02 Slow-Protocols
  83. 01-80-C2-00-00-03 Nearest-non-TPMR-bridge
  84. 01-80-C2-00-00-04 MAC-specific-ctrl-proto-04
  85. 01-80-C2-00-00-05 Reserved-future-std-05
  86. 01-80-C2-00-00-06 Reserved-future-std-06
  87. 01-80-C2-00-00-07 MEF-Forum-ELMI-proto
  88. 01-80-C2-00-00-08 Provider-Bridge
  89. 01-80-C2-00-00-09 Reserved-future-std-09
  90. 01-80-C2-00-00-0A Reserved-future-std-0a
  91. 01-80-C2-00-00-0B EDE-SS-PEP
  92. 01-80-C2-00-00-0C Reserved-future-std-0c
  93. 01-80-C2-00-00-0D Provider-Bridge-MVRP
  94. 01-80-C2-00-00-0E LLDP_Multicast
  95. 01-80-C2-00-00-0F Reserved-future-std-0f
  96. 01-80-C2-00-00-10 Bridge-Management
  97. 01-80-C2-00-00-11 Load-Server
  98. 01-80-C2-00-00-12 Loadable-Device
  99. 01-80-C2-00-00-13 IEEE-1905.1-Control
  100. 01-80-C2-00-00-14 ISIS-all-level-1-IS's
  101. 01-80-C2-00-00-15 ISIS-all-level-2-IS's
  102. 01-80-C2-00-00-18 IEEE-802.1B-All-Manager-Stations
  103. 01-80-C2-00-00-19 IEEE-802.11aa-groupcast-with-retries
  104. 01-80-C2-00-00-1A IEEE-802.1B-All-Agent-Stations
  105. 01-80-C2-00-00-1B ESIS-all-multicast-capable-ES's
  106. 01-80-C2-00-00-1C ESIS-all-multicast-announcements
  107. 01-80-C2-00-00-1D ESIS-all-multicast-capable-IS's
  108. 01-80-C2-00-00-1E Token-Ring-all-DTR-Concentrators
  109. 01-80-C2-00-00-30/45 OAM-Multicast-DA-Class-1
  110. 01-80-C2-00-00-38/45 OAM-Multicast-DA-Class-2
  111. 01-80-C2-00-00-40 All-RBridges
  112. 01-80-C2-00-00-41 All-IS-IS-RBridges
  113. 01-80-C2-00-00-42 All-Egress-RBridges
  114. 01-80-C2-00-00-45 TRILL-End-Stations
  115. 01-80-C2-00-00-46 All-Edge-RBridges
  116. 01-80-C2-00-01-00 FDDI-RMT-Directed-Beacon
  117. 01-80-C2-00-01-10 FDDI-status-report-frame
  118. 01-DD-00-FF-FF-FF Ungermann-Bass-boot-me-requests
  119. 01-DD-01-00-00-00 Ungermann-Bass-Spanning-Tree
  120. 01-E0-52-CC-CC-CC Foundry-DP
  121. # DOCSIS, defined in ANSI SCTE 22-1 2012
  122. 01-E0-2F-00-00-01 DOCSIS-CM
  123. 01-E0-2F-00-00-02 DOCSIS-CMTS
  124. 01-E0-2F-00-00-03 DOCSIS-STP
  125. # Extremenetworks in their infinite wisdom seems to use 02-04-94 (Vendor MAC XOR 02-00-00)
  126. # for their base mac address, thus colliding with MS-NLB 02-04/16 which Microsoft in their
  127. # infinite wisdom decided to use for MS-NLB.
  128. 02-04-96-00-00-00/24 ExtremeNetworks
  129. # Microsoft Network Load Balancing (NLB)
  130. # Actually, 02-01-virtualip to 02-20-virtualip will be used from server to rest-of-world
  131. # 02-bf-virtualip will be used from rest-of-world to server
  132. 02-BF-00-00-00-00/16 MS-NLB-VirtServer
  133. 02-01-00-00-00-00/16 MS-NLB-PhysServer-01
  134. 02-02-00-00-00-00/16 MS-NLB-PhysServer-02
  135. 02-03-00-00-00-00/16 MS-NLB-PhysServer-03
  136. 02-04-00-00-00-00/16 MS-NLB-PhysServer-04
  137. 02-05-00-00-00-00/16 MS-NLB-PhysServer-05
  138. 02-06-00-00-00-00/16 MS-NLB-PhysServer-06
  139. 02-07-00-00-00-00/16 MS-NLB-PhysServer-07
  140. 02-08-00-00-00-00/16 MS-NLB-PhysServer-08
  141. 02-09-00-00-00-00/16 MS-NLB-PhysServer-09
  142. 02-0a-00-00-00-00/16 MS-NLB-PhysServer-10
  143. 02-0b-00-00-00-00/16 MS-NLB-PhysServer-11
  144. 02-0c-00-00-00-00/16 MS-NLB-PhysServer-12
  145. 02-0d-00-00-00-00/16 MS-NLB-PhysServer-13
  146. 02-0e-00-00-00-00/16 MS-NLB-PhysServer-14
  147. 02-0f-00-00-00-00/16 MS-NLB-PhysServer-15
  148. 02-10-00-00-00-00/16 MS-NLB-PhysServer-16
  149. 02-11-00-00-00-00/16 MS-NLB-PhysServer-17
  150. 02-12-00-00-00-00/16 MS-NLB-PhysServer-18
  151. 02-13-00-00-00-00/16 MS-NLB-PhysServer-19
  152. 02-14-00-00-00-00/16 MS-NLB-PhysServer-20
  153. 02-15-00-00-00-00/16 MS-NLB-PhysServer-21
  154. 02-16-00-00-00-00/16 MS-NLB-PhysServer-22
  155. 02-17-00-00-00-00/16 MS-NLB-PhysServer-23
  156. 02-18-00-00-00-00/16 MS-NLB-PhysServer-24
  157. 02-19-00-00-00-00/16 MS-NLB-PhysServer-25
  158. 02-1a-00-00-00-00/16 MS-NLB-PhysServer-26
  159. 02-1b-00-00-00-00/16 MS-NLB-PhysServer-27
  160. 02-1c-00-00-00-00/16 MS-NLB-PhysServer-28
  161. 02-1d-00-00-00-00/16 MS-NLB-PhysServer-29
  162. 02-1e-00-00-00-00/16 MS-NLB-PhysServer-30
  163. 02-1f-00-00-00-00/16 MS-NLB-PhysServer-31
  164. 02-20-00-00-00-00/16 MS-NLB-PhysServer-32
  165. # [ The following block of addresses (03-...) are used by various ]
  166. # [ standards. Some (marked [TR?]) are suspected of only being ]
  167. # [ used on Token Ring for group addresses of Token Ring specific ]
  168. # [ functions, reference ISO 8802-5:1995 aka. IEEE 802.5:1995 for ]
  169. # [ some info. These in the Ethernet order for this list. On ]
  170. # [ Token Ring they appear reversed. They should never appear on ]
  171. # [ Ethernet. Others, not so marked, are normal reports (may be ]
  172. # [ seen on either).
  173. 03-00-00-00-00-01 NETBIOS-# [TR?]
  174. 03-00-00-00-00-02 Locate-Directory-Server # [TR?]
  175. 03-00-00-00-00-04 Synchronous-Bandwidth-Manager-# [TR?]
  176. 03-00-00-00-00-08 Configuration-Report-Server-# [TR?]
  177. 03-00-00-00-00-10 Ring-Error-Monitor-# [TR?]
  178. 03-00-00-00-00-10 (OS/2-1.3-EE+Communications-Manager)
  179. 03-00-00-00-00-20 Network-Server-Heartbeat-# [TR?]
  180. 03-00-00-00-00-40 (OS/2-1.3-EE+Communications-Manager)
  181. 03-00-00-00-00-80 Active-Monitor # [TR?]
  182. 03-00-00-00-01-00 OSI-All-IS-Token-Ring-Multicast
  183. 03-00-00-00-02-00 OSI-All-ES-Token-Ring-Multicast
  184. 03-00-00-00-04-00 LAN-Manager # [TR?]
  185. 03-00-00-00-08-00 Ring-Wiring-Concentrator # [TR?]
  186. 03-00-00-00-10-00 LAN-Gateway # [TR?]
  187. 03-00-00-00-20-00 Ring-Authorization-Server # [TR?]
  188. 03-00-00-00-40-00 IMPL-Server # [TR?]
  189. 03-00-00-00-80-00 Bridge # [TR?]
  190. 03-00-00-20-00-00 IP-Token-Ring-Multicast (RFC1469)
  191. 03-00-00-80-00-00 Discovery-Client
  192. 03-00-0C-00-00/40 ISL-Frame [TR?]
  193. 03-00-C7-00-00-EE HP (Compaq) ProLiant NIC teaming
  194. 03-00-FF-FF-FF-FF All-Stations-Address
  195. 03-BF-00-00-00-00/16 MS-NLB-VirtServer-Multicast
  196. 09-00-07-00-00-00/40 AppleTalk-Zone-multicast-addresses
  197. # only goes through 09-00-07-00-00-FC?
  198. 09-00-07-FF-FF-FF AppleTalk-broadcast-address
  199. 09-00-09-00-00-01 HP-Probe
  200. 09-00-09-00-00-04 HP-DTC
  201. 09-00-0D-00-00-00/24 ICL-Oslan-Multicast
  202. 09-00-0D-02-00-00 ICL-Oslan-Service-discover-only-on-boot
  203. 09-00-0D-02-0A-38 ICL-Oslan-Service-discover-only-on-boot
  204. 09-00-0D-02-0A-39 ICL-Oslan-Service-discover-only-on-boot
  205. 09-00-0D-02-0A-3C ICL-Oslan-Service-discover-only-on-boot
  206. 09-00-0D-02-FF-FF ICL-Oslan-Service-discover-only-on-boot
  207. 09-00-0D-09-00-00 ICL-Oslan-Service-discover-as-required
  208. 09-00-1E-00-00-00 Apollo-DOMAIN
  209. 09-00-2B-00-00-00 DEC-MUMPS?
  210. 09-00-2B-00-00-01 DEC-DSM/DDP
  211. 09-00-2B-00-00-02 DEC-VAXELN?
  212. 09-00-2B-00-00-03 DEC-Lanbridge-Traffic-Monitor-(LTM)
  213. 09-00-2B-00-00-04 DEC-MAP-(or-OSI?)-End-System-Hello?
  214. 09-00-2B-00-00-05 DEC-MAP-(or-OSI?)-Intermediate-System-Hello?
  215. 09-00-2B-00-00-06 DEC-CSMA/CD-Encryption?
  216. 09-00-2B-00-00-07 DEC-NetBios-Emulator?
  217. 09-00-2B-00-00-0F DEC-Local-Area-Transport-(LAT)
  218. 09-00-2B-00-00-10/44 DEC-Experimental
  219. 09-00-2B-01-00-00 DEC-LanBridge-Copy-packets-(All-bridges)
  220. 09-00-2B-01-00-01 DEC-LanBridge-Hello-packets-(All-local-bridges)
  221. 09-00-2B-02-00-00 DEC-DNA-Level-2-Routing-Layer-routers?
  222. 09-00-2B-02-01-00 DEC-DNA-Naming-Service-Advertisement?
  223. 09-00-2B-02-01-01 DEC-DNA-Naming-Service-Solicitation?
  224. 09-00-2B-02-01-09 DEC-Availability-Manager-for-Distributed-Systems-DECamds
  225. 09-00-2B-02-01-02 DEC-Distributed-Time-Service
  226. 09-00-2B-03-00-00/32 DEC-default-filtering-by-bridges?
  227. 09-00-2B-04-00-00 DEC-Local-Area-System-Transport-(LAST)?
  228. 09-00-2B-23-00-00 DEC-Argonaut-Console?
  229. 09-00-4C-00-00-00 BICC-802.1-management
  230. 09-00-4C-00-00-02 BICC-802.1-management
  231. 09-00-4C-00-00-06 BICC-Local-bridge-STA-802.1(D)-Rev6
  232. 09-00-4C-00-00-0C BICC-Remote-bridge-STA-802.1(D)-Rev8
  233. 09-00-4C-00-00-0F BICC-Remote-bridge-ADAPTIVE-ROUTING
  234. 09-00-56-FF-00-00/32 Stanford-V-Kernel,-version-6.0
  235. 09-00-6A-00-01-00 TOP-NetBIOS.
  236. 09-00-77-00-00-00 Retix-Bridge-Local-Management-System
  237. 09-00-77-00-00-01 Retix-spanning-tree-bridges
  238. 09-00-77-00-00-02 Retix-Bridge-Adaptive-routing
  239. 09-00-7C-01-00-01 Vitalink-DLS-Multicast
  240. 09-00-7C-01-00-03 Vitalink-DLS-Inlink
  241. 09-00-7C-01-00-04 Vitalink-DLS-and-non-DLS-Multicast
  242. 09-00-7C-02-00-05 Vitalink-diagnostics
  243. 09-00-7C-05-00-01 Vitalink-gateway?
  244. 09-00-7C-05-00-02 Vitalink-Network-Validation-Message
  245. 09-00-87-80-FF-FF Xyplex-Terminal-Servers
  246. 09-00-87-90-FF-FF Xyplex-Terminal-Servers
  247. 0C-00-0C-00-00/40 ISL-Frame
  248. 0D-1E-15-BA-DD-06 HP
  249. 20-52-45-43-56-00/40 Receive
  250. 20-53-45-4E-44-00/40 Send
  251. 33-33-00-00-00-00 IPv6-Neighbor-Discovery
  252. 33-33-00-00-00-00/16 IPv6mcast
  253. AA-00-03-00-00-00/32 DEC-UNA
  254. AA-00-03-01-00-00/32 DEC-PROM-AA
  255. AA-00-03-03-00-00/32 DEC-NI20
  256. AB-00-00-01-00-00 DEC-MOP-Dump/Load-Assistance
  257. AB-00-00-02-00-00 DEC-MOP-Remote-Console
  258. AB-00-00-03-00-00 DECNET-Phase-IV-end-node-Hello-packets
  259. AB-00-00-04-00-00 DECNET-Phase-IV-Router-Hello-packets
  260. AB-00-03-00-00-00 DEC-Local-Area-Transport-(LAT)-old
  261. AB-00-04-01-00-00/32 DEC-Local-Area-VAX-Cluster-groups-SCA
  262. CF-00-00-00-00-00 Ethernet-Configuration-Test-protocol-(Loopback)
  263. FF-FF-00-60-00-04 Lantastic
  264. FF-FF-00-40-00-01 Lantastic
  265. FF-FF-01-E0-00-04 Lantastic
  266. FF-FF-FF-FF-FF-FF Broadcast