I don't know what problem you are trying to solve and have never looked at
any CCIE practice scenarios, but I can tell you this.
SNA uses
0000 0100 0000 0100 (0404 for DSAP and SSAP) (test frame?)
0000 0101 0000 0101 (0505 for DSAP and SSAP) (session establishment?)
0000 1000 0000 1000 (0808 for DSAP and SSAP) (during the session?)
0000 1100 0000 1100 (0C0C for DSAP and SSAP) (during the session?)
I can't remember for sure which DSAP and SSAP are used for which purpose,
but I do know that 04 and 05 happen near the beginning of the session. I
think 04 is used for the first LLC test frame, which is also sent as a
Token Ring explorer, although that's not really relevant.
To get 04 or 05, you could use 0000 0100 (04) and a wildcard mask of 0000
0001 (01) where 0 means must match and 1 means don't care, as in
access-list wildcard masks.
To get 08 or 0C, you could use 0000 1100 (0C) and a wildcard mask of 0000
0100 (04) where 0 means must match and 1 means don't care.
Perhaps the 0000 1101 (0D) is some weird way of combining everything? It
could me a wildcard mask where 0 means must match and 1 means don't care.
Notice that the third bit in for 4, 5, 8, and C is always 0 as it is in
1101 (D)! Ah hah, that's a clue!
Please let us know what you find as you investigate this. I love a puzzle
like this! ;-) Thanks.
Priscilla
At 06:18 AM 9/7/01, Cisco Lover wrote:
>Hi Priscilla,
>
>Thanks for the reply.
>This is actually what I seen in most of the CCIE preparation labs???
>But I donot know whats true to use..
>
>I can see in Caslow that he is using 0x0404 and 0x0004 to filter SNA
>traffic.But in some other test papers they are using
>0x0d0d 0x0001.
>
>As far as I know it is the result of ANDING of test+explorer+...frames of
>SNA and not sure How to get this..
>
>Any idea???
>
>
>>From: "Priscilla Oppenheimer"
>>Reply-To: "Priscilla Oppenheimer"
>>To: [EMAIL PROTECTED]
>>Subject: Re: DLSW Inside:SNA/Netbios traffic:FOR CCIES [7:18773]
>>Date: Fri, 7 Sep 2001 00:33:37 -0400
>>
>>The LLC SAP for NetBIOS is F0. DSAP, SSAP would be FOFO.
>>
>>SNA uses a bunch of SAPs. I have seen 0x04, 0x05, 0x08, 0x0C. I haven't
>>seen D0. In fact, D0 would be a global DSAP because the first bit is set.
>>In the SSAP the first bit is the command/response bit. The bit being set
>>means that the frame is a response.
>>
>>What are the masks you mentioned? What are you working on??
>>
>>Priscilla
>>
>>At 05:03 AM 9/6/01, Cisco Lover wrote:
>> >Hi guys,,
>> >
>> >Any one can explain how the network+masks for NETBIOS and SNA traffic
comes
>> >as 0xf0f0 0x0001 and 0xd0d0 0x0001f????
>> >
>> >IS IRB/RSRB/SRB/SRTB also important to consider for CCIE lab or DLSW is
>> >enough ????
>> >
>> >Thanks for the help.
>> >
>> >Cisco lover
>> >
>> >_________________________________________________________________
>> >Get your FREE download of MSN Explorer at
http://explorer.msn.com/intl.asp
>>________________________
>>
>>Priscilla Oppenheimer
>>http://www.priscilla.com
>_________________________________________________________________
>Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp
>
________________________
Priscilla Oppenheimer
http://www.priscilla.com
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=19022&t=18773
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
