The C00000xxxxxx MAC addresses in token ring are known as "function
addresses". There are several different kinds:
Some for Maintanence of the ring:
"Active Monitor Present" MAC frame
"Standby Montior present" MAC frame
"Ring Error Monitor"
"Ring Parameter Server"
....etc...etc....etc....
Other for are user defined:
C00000008000-C000400000
Yours C00000800000 falls in the user defined catagory. A quick search
pointed me to
"http://support.microsoft.com/support/kb/articles/Q99/7/45.ASP"; It
states it is a functional address used for IPX on token-ring.
DaveC
infosecurite wrote:
>
> Hello,
>
> Lot of packets on my token-ring network gots the
> destination mac address C00000800000.
> It cause me some trouble because it seems that it's a
> multicast address (I'm not sure) so my firewall show
> in my log lot of drops.
> This not drop really in fact the communication because
> all is ok for my users.
>
> So I think that's this multicast mac address made the
> packet presented to lot of token-ring interfaces
> causing an big amount of non usefull network load. I
> try to explain that to my network administrator, but
> he do not know why we have that.
>
> Could you help me ?
>
> regards,
> steve
>
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Auctions - buy the things you want at great prices
> http://auctions.yahoo.com/
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5196&t=5193
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
