2.1 ethernet 프로토콜 스택
[그림 1] ethernet 프로토콜 스택
ethernet 프로토콜 스택은 목적지 mac 주소, 발신지 mac 주소와 L3 타입 정보로 구성합니다.
ethernet의 mac 주소는 6바이트이며 표기할 때는 12:34:56:78:9a:bc 처럼 1바이트씩 16진수로 나타내고 사이에 콜론(:)을 붙여 나타냅니다.
L3타입은 통신에 사용하는 네트워크 계층 프로토콜을 나타내며 IPv4는 0x0800이며 ARP는 0x806입니다. 다음은 네트워크 계층 프로토콜에 따른 L3 타입의 값입니다.
@ 0000-05DC IEEE802.3 Length Field
(0.:1500.)
+ 0101-01FF Experimental
0200 Xerox PUP (conflicts with 802.3 Length Field
range) (see 0A00)
0201 Xerox PUP Address Translation (conflicts ...)
(see 0A01)
0400 Nixdorf (conflicts with 802.3 Length Field)
+*
0600 Xerox NS
IDP
0601 XNS Address Translation (3Mb only)
+*
0800 DOD
Internet Protocol (IP)
+
0801 X.75
Internet
+
0802 NBS
Internet
+
0803 ECMA
Internet
+
0804 CHAOSnet
+
0805 X.25
Level 3
+*
0806 Address
Resolution Protocol (ARP) (for IP and for CHAOS)
0807 XNS Compatibility
081C Symbolics Private
+ 0888-088A Xyplex
0900 Ungermann-Bass network debugger
0A00 Xerox IEEE802.3 PUP
0A01 Xerox IEEE802.3 PUP Address Translation
0BAD Banyan
Systems
0BAF Banyon
VINES Echo
1000 Berkeley Trailer negotiation
1001-100F Berkeley
Trailer encapsulation for IP
1234 DCA - Multicast
* 1600 VALID system protocol
1989 Artificial Horizons ("Aviator" dogfight
simulator [on Sun])
1995 Datapoint Corporation (RCL lan protocol)
3C00 3Com NBP virtual circuit datagram (like XNS SPP)
not registered
3C01 3Com NBP System control datagram not registered
3C02 3Com NBP Connect request (virtual cct) not
registered
3C03 3Com NBP Connect repsonse not registered
3C04 3Com NBP Connect complete not registered
3C05 3Com NBP Close request (virtual cct) not
registered
3C06 3Com NBP Close response not registered
3C07 3Com NBP Datagram (like XNS IDP) not registered
3C08 3Com NBP Datagram broadcast not registered
3C09 3Com NBP Claim NetBIOS name not registered
3C0A 3Com NBP
Delete Netbios name not registered
3C0B 3Com NBP Remote adaptor status request not
registered
3C0C 3Com NBP Remote adaptor response not registered
3C0D 3Com NBP
Reset not registered
4242 PCS Basic Block Protocol
424C Information
Modes Little Big LAN diagnostic
4321 THD - Diddle
4C42 Information
Modes Little Big LAN
% 5208
BBN Simnet Private
6000 DEC unassigned, experimental
6001 DEC Maintenance Operation Protocol (MOP)
Dump/Load Assistance
6002 DEC Maintenance Operation Protocol (MOP) Remote
Console
6003 DECNET Phase IV, DNA Routing
6004 DEC Local Area Transport (LAT)
6005 DEC diagnostic protocol (at interface
initialization?)
6006 DEC customer protocol
6007 DEC Local Area VAX Cluster (LAVC), System
Communication Architecture (SCA)
6008 DEC AMBER
6009 DEC MUMPS
+ 6010-6014 3Com Corporation
7000 Ungermann-Bass download
7001 Ungermann-Bass NIUs
7002 Ungermann-Bass diagnostic/loopback
7003 Ungermann-Bass ??? (NMC to/from UB Bridge)
7005 Ungermann-Bass Bridge Spanning Tree
7007 OS/9 Microware
7009 OS/9 Net?
+ 7020-7029 LRT (England) (now
Sintrom)
7030 Racal-Interlan
7031 Prime NTS (Network Terminal Service)
7034 Cabletron
8003 Cronus VLN
8004 Cronus Direct
8005 HP Probe protocol
+
8006 Nestar
+
8008
AT&T/Stanford
Univ. Local
use
8010 Excelan
+
8013 Silicon
Graphics diagnostic
+
8014 Silicon
Graphics network games
+
8015 Silicon
Graphics reserved
+
8016 Silicon
Graphics XNS NameServer, bounce server
+
8019 Apollo
DOMAIN
+
802E Tymshare
+
802F Tigan,
Inc.
+
8035
Reverse Address Resolution Protocol (RARP)
+ 8036
Aeonic Systems
8037 IPX (Novell Netware?)
8038 DEC LanBridge Management
8039 DEC DSM/DDP
803A DEC Argonaut Console
803B DEC VAXELN
803C DEC DNS Naming Service
803D DEC Ethernet CSMA/CD Encryption Protocol
803E DEC Distributed Time Service
803F DEC LAN Traffic Monitor Protocol
8040 DEC PATHWORKS DECnet NETBIOS Emulation
8041 DEC Local Area System Transport
8042 DEC unassigned
+
8044 Planning
Research Corp.
+
8046 AT&T
+
8047 AT&T
8048 DEC Availability Manager for Distributed Systems
DECamds (but someone at DEC says not)
+
8049
ExperData
+
805B VMTP
(Versatile Message Transaction Protocol, RFC-1045) (Stanford) [was Stanford V
Kernel, experimental]
+
805C Stanford
V Kernel, version 6.0
+
805D Evans
& Sutherland
+
8060 Little
Machines
+
8062
Counterpoint Computers
+
8065 University
of Mass. at Amherst
+
8066
University of Mass. at Amherst
+
8067 Veeco
Integrated Automation
+
8068 General
Dynamics
+
8069 AT&T
+
806A Autophon
+
806C ComDesign
+
806D
Compugraphic Corporation
+ 806E-8077 Landmark Graphics
Corporation
+
807A Matra
+
807B Dansk
Data Elektronik
+
807C Merit
Internodal (or Univ of Michigan?)
+ 807D-807F Vitalink Communications
+
8080 Vitalink
TransLAN III Management
+ 8081-8083 Counterpoint
Computers
8088-808A Xyplex
+
809B
EtherTalk (AppleTalk over Ethernet)
+ 809C-809E Datability
+ 809F
Spider Systems Ltd.
+
80A3 Nixdorf
Computers
+ 80A4-80B3 Siemens Gammasonics Inc.
+ 80C0-80C3 DCA (Digital Comm.
Assoc.) Data Exchange Cluster
+
80C6 Pacer
Software
+
80C7 Applitek
Corporation
+ 80C8-80CC Intergraph Corporation
+ 80CD-80CE Harris Corporation
+ 80CF-80D2 Taylor Instrument
+ 80D3-80D4 Rosemount Corporation
80D5 IBM SNA Services over Ethernet
+
80DD Varian
Associates
+ 80DE-80DF TRFS (Integrated
Solutions Transparent Remote File System)
+ 80E0-80E3 Allen-Bradley
+ 80E4-80F0 Datability
+
80F2 Retix
+
80F3
AppleTalk Address Resolution Protocol (AARP)
+ 80F4-80F5 Kinetics
+
80F7 Apollo
Computer
+ 80FF-8101 Wellfleet
Communications
+
8102
Wellfleet; BOFL (Breath OF Life) pkts [every 5-10 secs.]
+
8103
Wellfleet Communications
8107-8109 Symbolics
Private
812B Talaris
+
8130 Waterloo
Microsystems Inc.
+
8131 VG
Laboratory Systems
+
8137 Novell
(old) NetWare IPX (ECONFIG E option)
+
8138 Novell,
Inc.
+ 8139-813D KTI
813F M/MUMPS data sharing
8145 Vrije Universiteit
(NL)
Amoeba 4 RPC (obsolete)
8146 Vrije Universiteit
(NL)
FLIP (Fast Local Internet Protocol)
8147 Vrije Universiteit
(NL)
[reserved]
814C SNMP over Ethernet (see RFC1089)
814F Technically Elite
Concepts Network Professor
8191
PowerLAN
NetBIOS/NetBEUI (PC)
817D XTP
81D6 Artisoft Lantastic
81D7 Artisoft Lantastic
8203-8205 QNX Software
Systems Ltd.
8390 Accton Technologies (unregistered)
852B Talaris multicast
8582 Kalpana
86DD IP version 6
8739 Control Technology
Inc.
RDP Without IP
873A Control Technology
Inc.
Mcast Industrial Ctrl Proto.
873B Control Technology
Inc.
Proprietary
873C Control Technology
Inc.
Proprietary
8820 Hitachi Cable (Optoelectronic Systems Laboratory)
8856 Axis
Communications
AB
proprietary bootstrap/config
8888 HP LanProbe test?
+
9000 Loopback
(Configuration Test Protocol)
9001 3Com (Formerly Bridge Communications), XNS
Systems Management
9002 3Com (Formerly Bridge Communications), TCP/IP
Systems Management
9003 3Com (Formerly Bridge Communications), loopback
detection
AAAA
DECNET?
Used by VAX 6220 DEBNI
FAF5 Sonix Arpeggio
% FF00
BBN VITAL-LanBridge cache wakeups
참고 사이트: http://www.cavebear.com/archive/cavebear/Ethernet/type.html
좀 더 자세한 자료를 원하면 http://www.cavebear.com/ 사이트를 방문하세요.
위 사이트는 ethernet에 관한 다양한 연구 자료를 제공하는 Karl Auerbach(CaveBear)의 것입니다.
'네트워크 및 보안 > TCPIP 프로토콜 파헤치기' 카테고리의 다른 글
[TCP/IP 프로토콜 파헤치기] 4. IPv4 프로토콜 (0) | 2017.04.14 |
---|---|
[TCP/IP 프로토콜 파헤치기] 3.2 ARP 트래픽 분석 (0) | 2017.04.14 |
[TCP/IP 프로토콜 파헤치기] 3.1 ARP 프로토콜 스택 (0) | 2017.04.10 |
[TCP/IP 프로토콜 파헤치기] 3. ARP 프로토콜 (0) | 2017.04.10 |
[TCP/IP 프로토콜 파헤치기] 2.2 ethernet 트래픽 분석 (2) | 2016.04.10 |
[TCP/IP 프로토콜 파헤치기] 2. Ethernet 프로토콜 (0) | 2016.04.10 |
[TCP/IP 프로토콜 파헤치기] 1.2.3 와이어 샤크 수집 화면 (0) | 2016.04.10 |
[TCP/IP 프로토콜 파헤치기] 1.2.2 와이어샤크 캡쳐 옵션 (0) | 2016.04.10 |
[TCP/IP 파헤치기] 1.2 와이어샤크 소개 (0) | 2016.04.10 |
[TCP/IP 프로토콜 파헤치기] 1.1 통신 모델 (0) | 2016.04.10 |