Netware 5 & above servers heed a set ncp protocol preferences parameter
which defaults to the following ordered set:
tcp ipx udp
We removed the udp entry (I've been able to avoid this particular area for
a while now, but when we modify defaults it's usually in the name of some
losing cause such as getting slp to work as advertised), so I don't really
have any ncp/udp traces (It vaguely reminds me of multimedia caching
servers, which can usually configure a transport protocol of choice).
I have examples, but Network Monitor, Agilent Internet Advisor & Etherpeek
4.0 don't seem to have modern ncp decodes. I have yet to figure out how to
get sniffer/netxray to export a decoded packet, but if you have access to
sniffer 4.5 or greater I could probably clean up an enc file & post.
Priscilla Oppenheimer on 11/12/2001 06:02:03 PM
To: "[EMAIL PROTECTED]" ,
[EMAIL PROTECTED]
cc:
Subject: RE: What frame format used by TCP/IP? [7:25924]
Interesting! Can you tell us more? In what situations does NCP run above
TCP? Also do you have an example where more than just the TCP layer is
decoded?
Thanks.
Priscilla
At 05:11 PM 11/12/01, [EMAIL PROTECTED] wrote:
>In contrast to the IPX-based implementation described below, packet
>captures seem to reveal that NCP DOES rely on a transport layer when using
>IP as a network layer mechanism.
>
> Flags: 0x00
> Status: 0x00
> Packet Length:66
> Timestamp: 19:09:38.677828 03/12/2001
>Ethernet Header
> Destination: 00:90:7F:0F:0B:D5
> Source: 00:10:A4:F5:5A:66
> Protocol Type:0x0800 IP
>IP Header - Internet Protocol Datagram
> Version: 4
> Header Length: 5 (20 bytes)
> Precedence: 0
> Type of Service: %0000
> Unused: %0
> Total Length: 48
> Identifier: 14671
> Fragmentation Flags: %010 Do Not Fragment
> Fragment Offset: 0 (0 bytes)
> Time To Live: 128
> IP Type: 0x06 TCP
> Header Checksum: 0xF3B3
> Source IP Address: 210.225.86.53
> Dest. IP Address: xxx.xxx.xxx.x xxx.xx.xxxxxx.xxx
> No Internet Datagram Options
>TCP - Transport Control Protocol
> Source Port: 2583
> Destination Port: 524 NCP
> Sequence Number: 1273813107
> Ack Number: 0
> Offset: 7
> Reserved: %000000
> Code: %000010
> Synch Sequence
> Window: 16384
> Checksum: 0x44D7
> Urgent Pointer: 0
> TCP Options:
> Option Type: 2 Maximum Segment Size
> Length: 4
> MSS: 1460
> Option Type: 1 No Operation
> Option Type: 1 No Operation
> Option Type: 4
> Length: 2
> Opt Value:
> TCP Data Area: No more data.
>Frame Check Sequence: 0x04007C00
>
>
>
>
>
>"Priscilla Oppenheimer" @groupstudy.com on 11/12/2001
>02:55:08 PM
>
>Please respond to "Priscilla Oppenheimer"
>
>Sent by: [EMAIL PROTECTED]
>
>To: [EMAIL PROTECTED]
>cc: (bcc: Kevin Cullimore)
>Subject: RE: What frame format used by TCP/IP? [7:25924]
>
>
>TCP/IP tells the Ethernet driver what kind of frame type to use and 99.99%
>percent of TCP/IP implementations tell the driver to use Ethernet II,
which
>is the frame format that has Dest Src Type. This is also known as arpa in
>the Cisco world.
>
>Is this what you were looking for, though? Or were you looking for a
>comparison of IP with IPX and a comparison of SPX with TCP, which I could
>write lots about too. ;-)
>
>One main difference between SPX and TCP, by the way, is that SPX is not
>used much. It's used by RCONSOLE for remote administration and some SNA
>gateways. Some printing services may use it. But most printing, file
>sharing, etc. uses NetWare Core Protocol (NCP) which runs directly above
>IPX.
>
>TCP, on the other hand, plays a major role in it stack. Many protocols run
>above TCP, including FTP, HTTP, Telnet, SMTP, POP, LDAP, BGP, and others.
>
>Priscilla
>
>
> >-----Original Message-----
> >From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> >Sent: Monday, November 12, 2001 8:55 AM
> >To: [EMAIL PROTECTED]
> >Subject: What frame format used by TCP/IP? [7:25924]
> >
> >
> >
> >
> >Compared with IPX/SPX, what type of frames does TCP/IP use?
> >
> >Thanks @ Regards to all
> >
> >_________________________________________________________________
> >Get your FREE download of MSN Explorer at
http://explorer.msn.com/intl.asp
> >
> >[GroupStudy.com removed an attachment of type text/x-vcard which had a
>name
> >of Thomas Crowe.vcf]
>________________________
>
>Priscilla Oppenheimer
>http://www.priscilla.com
>================================================================
>This message may contain confidential and/or privileged
>information. If you are not the addressee or authorized to
>receive this for the addressee, you must not use, copy,
>disclose or take any action based on this message or any
>information herein. If you have received this message in
>error, please advise the sender immediately by reply e-mail
>and delete this message. Thank you for your cooperation.
>================================================================
________________________
Priscilla Oppenheimer
http://www.priscilla.com
================================================================
This message may contain confidential and/or privileged
information. If you are not the addressee or authorized to
receive this for the addressee, you must not use, copy,
disclose or take any action based on this message or any
information herein. If you have received this message in
error, please advise the sender immediately by reply e-mail
and delete this message. Thank you for your cooperation.
================================================================
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26069&t=25924
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
