wka.tmpl

   1 #
   2 # Well-known addresses.
   3 #
   4 # Wireshark - Network traffic analyzer
   5 # By Gerald Combs <gerald [AT] wireshark.org>
   6 # Copyright 1998 Gerald Combs
   7 #
   8 # This program is free software; you can redistribute it and/or
   9 # modify it under the terms of the GNU General Public License
  10 # as published by the Free Software Foundation; either version 2
  11 # of the License, or (at your option) any later version.
  12 #
  13 # This program is distributed in the hope that it will be useful,
  14 # but WITHOUT ANY WARRANTY; without even the implied warranty of
  15 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  16 # GNU General Public License for more details.
  17 #
  18 # You should have received a copy of the GNU General Public License
  19 # along with this program; if not, write to the Free Software
  20 # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
  21 #
  22 # The data below has been assembled from the following sources:
  23 #
  24 # Michael Patton's "Ethernet Codes Master Page" available from:
  25 # <http://www.cavebear.com/CaveBear/Ethernet/>
  26 # <ftp://ftp.cavebear.com/pub/Ethernet.txt>
  27 #
  28 # Microsoft Windows 2000 Server
  29 # Operating System
  30 # Network Load Balancing Technical Overview
  31 # White Paper
  32 #
  33 00-00-0C-07-AC/40       All-HSRP-routers
  34 00-00-5E-00-01/40       IETF-VRRP-VRID
  35 00-BF-00-00-00-00/16    MS-NLB-VirtServer
  36 00-E0-2B-00-00-00       Extreme-EDP
  37 # Extreme Encapsulation Protocol (basically EDP renamed)
  38 00-E0-2B-00-00-01       Extreme-EEP
  39 00-E0-2B-00-00-02       Extreme-ESRP-Client
  40 00-E0-2B-00-00-04       Extreme-EAPS
  41 00-E0-2B-00-00-06       Extreme-EAPS-SL
  42 00-E0-2B-00-00-08       Extreme-ESRP-Master
  43 01-00-0C-00-00/40       ISL-Frame
  44 01-00-0C-CC-CC-CC       CDP/VTP/DTP/PAgP/UDLD
  45 01-00-0C-CC-CC-CD       PVST+
  46 01-00-0C-CD-CD-CD       STP-UplinkFast
  47 01-00-0C-CD-CD-CE       VLAN-bridge
  48 01-00-0C-CD-CD-D0       GBPT
  49 01-00-0C-DD-DD-DD       CGMP
  50 01-00-10-00-00-20       Hughes-Lan-Systems-Terminal-Server-S/W-download
  51 01-00-10-FF-FF-20       Hughes-Lan-Systems-Terminal-Server-S/W-request
  52 01-00-1D-00-00-00       Cabletron-PC-OV-PC-discover-(on-demand)
  53 01-00-1D-00-00-05       Cabletron-PVST-BPDU
  54 01-00-1D-00-00-06       Cabletron-QCSTP-BPDU
  55 01-00-1D-42-00-00       Cabletron-PC-OV-Bridge-discover-(on-demand)
  56 01-00-1D-52-00-00       Cabletron-PC-OV-MMAC-discover-(on-demand)
  57 01-00-3C                Auspex-Systems-(Serverguard)
  58 01-00-5E/25             IPv4mcast
  59 01-00-81-00-00-00       Nortel-Network-Management
  60 01-00-81-00-00-02       Nortel-Network-Management
  61 01-00-81-00-01-00       Nortel-autodiscovery
  62 01-00-81-00-01-01       Nortel-autodiscovery
  63 #
  64 # As per
  65 #
  66 #       http://www.t11.org/ftp/t11/pub/fc/bb-5/08-334v0.pdf
  67 #
  68 # Broadcom "donated" one of their OUIs, 00-10-18, for use for
  69 # Fibre Channel over Ethernet, so we add entries for the
  70 # addresses in that document and a group of addresses for all
  71 # otherwise unlisted 01-10-18-XX-XX-XX addresses.
  72 #
  73 01-10-18-01-00-00       All-FCoE-MACs
  74 01-10-18-01-00-01       All-ENode-MACs
  75 01-10-18-01-00-02       All-FCF-MACs
  76 01-10-18-00-00-00/24    FCoE-group
  77 01-11-1E-00-00-01       EPLv2_SoC
  78 01-11-1E-00-00-02       EPLv2_PRes
  79 01-11-1E-00-00-03       EPLv2_SoA
  80 01-11-1E-00-00-04       EPLv2_ASnd
  81 01-11-1E-00-00-05       EPLv2_AMNI
  82 01-20-25/25             Control-Technology-Inc's-Industrial-Ctrl-Proto.
  83 01-80-24-00-00-00       Kalpana-Etherswitch-every-60-seconds
  84 01-80-C2-00-00-00/44    Spanning-tree-(for-bridges)
  85 01-80-C2-00-00-02       Slow-Protocols
  86 01-80-C2-00-00-03       Nearest customer bridge
  87 01-80-C2-00-00-0E       LLDP_Multicast
  88 01-80-C2-00-00-0F       Nearest non-TPMR bridge
  89 01-80-C2-00-00-10       Bridge-Management
  90 01-80-C2-00-00-11       Load-Server
  91 01-80-C2-00-00-12       Loadable-Device
  92 01-80-C2-00-00-13       IEEE-1905.1-Control
  93 01-80-C2-00-00-14       ISIS-all-level-1-IS's
  94 01-80-C2-00-00-15       ISIS-all-level-2-IS's
  95 01-80-C2-00-00-18       IEEE-802.1B-All-Manager-Stations
  96 01-80-C2-00-00-19       IEEE-802.11aa-groupcast-with-retries
  97 01-80-C2-00-00-1A       IEEE-802.1B-All-Agent-Stations
  98 01-80-C2-00-00-1B       ESIS-all-multicast-capable-ES's
  99 01-80-C2-00-00-1C       ESIS-all-multicast-announcements
 100 01-80-C2-00-00-1D       ESIS-all-multicast-capable-IS's
 101 01-80-C2-00-00-1E       Token-Ring-all-DTR-Concentrators
 102 01-80-C2-00-00-30/45    OAM-Multicast-DA-Class-1
 103 01-80-C2-00-00-38/45    OAM-Multicast-DA-Class-2
 104 01-80-C2-00-00-40       All-RBridges
 105 01-80-C2-00-00-41       All-IS-IS-RBridges
 106 01-80-C2-00-00-42       All-Egress-RBridges
 107 01-80-C2-00-00-45       TRILL-End-Stations
 108 01-80-C2-00-00-46       All-Edge-RBridges
 109 01-80-C2-00-01-00       FDDI-RMT-Directed-Beacon
 110 01-80-C2-00-01-10       FDDI-status-report-frame
 111 01-DD-00-FF-FF-FF       Ungermann-Bass-boot-me-requests
 112 01-DD-01-00-00-00       Ungermann-Bass-Spanning-Tree
 113 01-E0-52-CC-CC-CC       Foundry-DP
 114 # DOCSIS, defined in ANSI SCTE 22-1 2012
 115 01-E0-2F-00-00-01       DOCSIS-CM
 116 01-E0-2F-00-00-02       DOCSIS-CMTS
 117 01-E0-2F-00-00-03       DOCSIS-STP
 118
 119 # Extremenetworks in their infinite wisdom seems to use 02-04-94 (Vendor MAC XOR 02-00-00)
 120 # for their base mac address, thus colliding with MS-NLB 02-04/16 which Microsoft in their
 121 # infinite wisdom decided to use for MS-NLB.
 122 02-04-96-00-00-00/24    ExtremeNetworks
 123
 124 # Microsoft Network Load Balancing (NLB)
 125 # Actually, 02-01-virtualip to 02-20-virtualip will be used from server to rest-of-world
 126 # 02-bf-virtualip will be used from rest-of-world to server
 127 02-BF-00-00-00-00/16    MS-NLB-VirtServer
 128 02-01-00-00-00-00/16    MS-NLB-PhysServer-01
 129 02-02-00-00-00-00/16    MS-NLB-PhysServer-02
 130 02-03-00-00-00-00/16    MS-NLB-PhysServer-03
 131 02-04-00-00-00-00/16    MS-NLB-PhysServer-04
 132 02-05-00-00-00-00/16    MS-NLB-PhysServer-05
 133 02-06-00-00-00-00/16    MS-NLB-PhysServer-06
 134 02-07-00-00-00-00/16    MS-NLB-PhysServer-07
 135 02-08-00-00-00-00/16    MS-NLB-PhysServer-08
 136 02-09-00-00-00-00/16    MS-NLB-PhysServer-09
 137 02-0a-00-00-00-00/16    MS-NLB-PhysServer-10
 138 02-0b-00-00-00-00/16    MS-NLB-PhysServer-11
 139 02-0c-00-00-00-00/16    MS-NLB-PhysServer-12
 140 02-0d-00-00-00-00/16    MS-NLB-PhysServer-13
 141 02-0e-00-00-00-00/16    MS-NLB-PhysServer-14
 142 02-0f-00-00-00-00/16    MS-NLB-PhysServer-15
 143 02-10-00-00-00-00/16    MS-NLB-PhysServer-16
 144 02-11-00-00-00-00/16    MS-NLB-PhysServer-17
 145 02-12-00-00-00-00/16    MS-NLB-PhysServer-18
 146 02-13-00-00-00-00/16    MS-NLB-PhysServer-19
 147 02-14-00-00-00-00/16    MS-NLB-PhysServer-20
 148 02-15-00-00-00-00/16    MS-NLB-PhysServer-21
 149 02-16-00-00-00-00/16    MS-NLB-PhysServer-22
 150 02-17-00-00-00-00/16    MS-NLB-PhysServer-23
 151 02-18-00-00-00-00/16    MS-NLB-PhysServer-24
 152 02-19-00-00-00-00/16    MS-NLB-PhysServer-25
 153 02-1a-00-00-00-00/16    MS-NLB-PhysServer-26
 154 02-1b-00-00-00-00/16    MS-NLB-PhysServer-27
 155 02-1c-00-00-00-00/16    MS-NLB-PhysServer-28
 156 02-1d-00-00-00-00/16    MS-NLB-PhysServer-29
 157 02-1e-00-00-00-00/16    MS-NLB-PhysServer-30
 158 02-1f-00-00-00-00/16    MS-NLB-PhysServer-31
 159 02-20-00-00-00-00/16    MS-NLB-PhysServer-32
 160
 161 #       [ The following block of addresses (03-...) are used by various ]
 162 #       [ standards.  Some (marked [TR?]) are suspected of only being   ]
 163 #       [ used on Token Ring for group addresses of Token Ring specific ]
 164 #       [ functions, reference ISO 8802-5:1995 aka. IEEE 802.5:1995 for ]
 165 #       [ some info.  These in the Ethernet order for this list.  On    ]
 166 #       [ Token Ring they appear reversed.  They should never appear on ]
 167 #       [ Ethernet.  Others, not so marked, are normal reports (may be  ]
 168 #       [ seen on either).
 169 03-00-00-00-00-01       NETBIOS-# [TR?]
 170 03-00-00-00-00-02       Locate-Directory-Server # [TR?]
 171 03-00-00-00-00-04       Synchronous-Bandwidth-Manager-# [TR?]
 172 03-00-00-00-00-08       Configuration-Report-Server-# [TR?]
 173 03-00-00-00-00-10       Ring-Error-Monitor-# [TR?]
 174 03-00-00-00-00-10       (OS/2-1.3-EE+Communications-Manager)
 175 03-00-00-00-00-20       Network-Server-Heartbeat-# [TR?]
 176 03-00-00-00-00-40       (OS/2-1.3-EE+Communications-Manager)
 177 03-00-00-00-00-80       Active-Monitor # [TR?]
 178 03-00-00-00-01-00       OSI-All-IS-Token-Ring-Multicast
 179 03-00-00-00-02-00       OSI-All-ES-Token-Ring-Multicast
 180 03-00-00-00-04-00       LAN-Manager # [TR?]
 181 03-00-00-00-08-00       Ring-Wiring-Concentrator # [TR?]
 182 03-00-00-00-10-00       LAN-Gateway # [TR?]
 183 03-00-00-00-20-00       Ring-Authorization-Server # [TR?]
 184 03-00-00-00-40-00       IMPL-Server # [TR?]
 185 03-00-00-00-80-00       Bridge # [TR?]
 186 03-00-00-20-00-00       IP-Token-Ring-Multicast (RFC1469)
 187 03-00-00-80-00-00       Discovery-Client
 188 03-00-0C-00-00/40       ISL-Frame [TR?]
 189 03-00-C7-00-00-EE       HP (Compaq) ProLiant NIC teaming
 190 03-00-FF-FF-FF-FF       All-Stations-Address
 191 03-BF-00-00-00-00/16    MS-NLB-VirtServer-Multicast
 192 09-00-07-00-00-00/40    AppleTalk-Zone-multicast-addresses
 193                         # only goes through 09-00-07-00-00-FC?
 194 09-00-07-FF-FF-FF       AppleTalk-broadcast-address
 195 09-00-09-00-00-01       HP-Probe
 196 09-00-09-00-00-04       HP-DTC
 197 09-00-0D-00-00-00/24    ICL-Oslan-Multicast
 198 09-00-0D-02-00-00       ICL-Oslan-Service-discover-only-on-boot
 199 09-00-0D-02-0A-38       ICL-Oslan-Service-discover-only-on-boot
 200 09-00-0D-02-0A-39       ICL-Oslan-Service-discover-only-on-boot
 201 09-00-0D-02-0A-3C       ICL-Oslan-Service-discover-only-on-boot
 202 09-00-0D-02-FF-FF       ICL-Oslan-Service-discover-only-on-boot
 203 09-00-0D-09-00-00       ICL-Oslan-Service-discover-as-required
 204 09-00-1E-00-00-00       Apollo-DOMAIN
 205 09-00-2B-00-00-00       DEC-MUMPS?
 206 09-00-2B-00-00-01       DEC-DSM/DDP
 207 09-00-2B-00-00-02       DEC-VAXELN?
 208 09-00-2B-00-00-03       DEC-Lanbridge-Traffic-Monitor-(LTM)
 209 09-00-2B-00-00-04       DEC-MAP-(or-OSI?)-End-System-Hello?
 210 09-00-2B-00-00-05       DEC-MAP-(or-OSI?)-Intermediate-System-Hello?
 211 09-00-2B-00-00-06       DEC-CSMA/CD-Encryption?
 212 09-00-2B-00-00-07       DEC-NetBios-Emulator?
 213 09-00-2B-00-00-0F       DEC-Local-Area-Transport-(LAT)
 214 09-00-2B-00-00-10/44    DEC-Experimental
 215 09-00-2B-01-00-00       DEC-LanBridge-Copy-packets-(All-bridges)
 216 09-00-2B-01-00-01       DEC-LanBridge-Hello-packets-(All-local-bridges)
 217 09-00-2B-02-00-00       DEC-DNA-Level-2-Routing-Layer-routers?
 218 09-00-2B-02-01-00       DEC-DNA-Naming-Service-Advertisement?
 219 09-00-2B-02-01-01       DEC-DNA-Naming-Service-Solicitation?
 220 09-00-2B-02-01-09       DEC-Availability-Manager-for-Distributed-Systems-DECamds
 221 09-00-2B-02-01-02       DEC-Distributed-Time-Service
 222 09-00-2B-03-00-00/32    DEC-default-filtering-by-bridges?
 223 09-00-2B-04-00-00       DEC-Local-Area-System-Transport-(LAST)?
 224 09-00-2B-23-00-00       DEC-Argonaut-Console?
 225 09-00-4C-00-00-00       BICC-802.1-management
 226 09-00-4C-00-00-02       BICC-802.1-management
 227 09-00-4C-00-00-06       BICC-Local-bridge-STA-802.1(D)-Rev6
 228 09-00-4C-00-00-0C       BICC-Remote-bridge-STA-802.1(D)-Rev8
 229 09-00-4C-00-00-0F       BICC-Remote-bridge-ADAPTIVE-ROUTING
 230 09-00-56-FF-00-00/32    Stanford-V-Kernel,-version-6.0
 231 09-00-6A-00-01-00       TOP-NetBIOS.
 232 09-00-77-00-00-00       Retix-Bridge-Local-Management-System
 233 09-00-77-00-00-01       Retix-spanning-tree-bridges
 234 09-00-77-00-00-02       Retix-Bridge-Adaptive-routing
 235 09-00-7C-01-00-01       Vitalink-DLS-Multicast
 236 09-00-7C-01-00-03       Vitalink-DLS-Inlink
 237 09-00-7C-01-00-04       Vitalink-DLS-and-non-DLS-Multicast
 238 09-00-7C-02-00-05       Vitalink-diagnostics
 239 09-00-7C-05-00-01       Vitalink-gateway?
 240 09-00-7C-05-00-02       Vitalink-Network-Validation-Message
 241 09-00-87-80-FF-FF       Xyplex-Terminal-Servers
 242 09-00-87-90-FF-FF       Xyplex-Terminal-Servers
 243 0C-00-0C-00-00/40       ISL-Frame
 244 0D-1E-15-BA-DD-06       HP
 245 20-52-45-43-56-00/40    Receive
 246 20-53-45-4E-44-00/40    Send
 247 33-33-00-00-00-00       IPv6-Neighbor-Discovery
 248 33-33-00-00-00-00/16    IPv6mcast
 249 AA-00-03-00-00-00/32    DEC-UNA
 250 AA-00-03-01-00-00/32    DEC-PROM-AA
 251 AA-00-03-03-00-00/32    DEC-NI20
 252 AB-00-00-01-00-00       DEC-MOP-Dump/Load-Assistance
 253 AB-00-00-02-00-00       DEC-MOP-Remote-Console
 254 AB-00-00-03-00-00       DECNET-Phase-IV-end-node-Hello-packets
 255 AB-00-00-04-00-00       DECNET-Phase-IV-Router-Hello-packets
 256 AB-00-03-00-00-00       DEC-Local-Area-Transport-(LAT)-old
 257 AB-00-04-01-00-00/32    DEC-Local-Area-VAX-Cluster-groups-SCA
 258 CF-00-00-00-00-00       Ethernet-Configuration-Test-protocol-(Loopback)
 259 FF-FF-00-60-00-04       Lantastic
 260 FF-FF-00-40-00-01       Lantastic
 261 FF-FF-01-E0-00-04       Lantastic
 262
 263 FF-FF-FF-FF-FF-FF       Broadcast