Sure... IPX is Novell's protocol - a one-time competitor to TCP/IP. Had some nice features, but fairly rare today.
SAP is the "Server Advertisement Protocol", a part of IPX where a server advertises itself to the network and where clients can request servers. Think of it like an IP broadcast to a CORBA ORB or another directory service... It looks like a request for the nearest server supporting "4", then a general request to all servers supporting "4" (whatever that it, it's been a while). I would guess that there is a Novell server or - more likely - a workstation with the Novell client/32 and IPX protocol installed. -----Original Message----- From: DeBerry, Casey [mailto:[EMAIL PROTECTED]] Sent: Friday, February 15, 2002 12:12 PM To: [EMAIL PROTECTED] Subject: can anyone explain what this is 11:10:29.646401 B 0:c0:2:23:61:75 > Broadcast sap e0 ui/C IPX/SMB 11:10:29.647579 B 0:c0:2:23:61:75 > Broadcast sap e0 ui/C IPX/SMB 11:10:29.648855 B 0:c0:2:23:61:75 > Broadcast sap e0 ui/C IPX/SMB 11:10:29.650119 B 0.00:c0:02:23:61:75.4013 > 0.ff:ff:ff:ff:ff:ff.452:ipx-sap-nearest-req 4 'ACACACACACABAFEEFFDFJFDCACACACACACACACAAA' 11:10:29.651387 B 0.00:c0:02:23:61:75.4013 > 0.ff:ff:ff:ff:ff:ff.452:ipx-sap-req 4 'ACACACACACAIAFEEFFDFJFDCACACACACACACACAAA' 11:10:29.652651 B 0.00:c0:02:23:61:75.4013 > 0.ff:ff:ff:ff:ff:ff.452:ipx-sap-req 278 'ACACACACACABAFEEFFDFJFDCACACACACACACACAAA' 11:10:49.653161 B 0:c0:2:23:61:75 Broadcast 8137 60: [000] FF FF 00 22 00 04 00 00 00 00 FF FF FF FF FF FF ..."............ [010] 04 52 00 00 00 00 00 C0 02 23 61 75 40 13 00 03 .R.......#au@... [020] 00 04 41 43 41 43 41 43 41 43 41 43 41 42 ..ACACACACACAB 11:10:49.654441 B 0:c0:2:23:61:75 Broadcast 8137 60: [000] FF FF 00 22 00 04 00 00 00 00 FF FF FF FF FF FF ..."............ [010] 04 52 00 00 00 00 00 C0 02 23 61 75 40 13 00 01 .R.......#au@... [020] 00 04 41 43 41 43 41 43 41 43 41 43 41 43 ..ACACACACACAC 11:10:49.655748 B 0:c0:2:23:61:75 Broadcast 8137 60: [000] FF FF 00 22 00 04 00 00 00 00 FF FF FF FF FF FF ..."............ [010] 04 52 00 00 00 00 00 C0 02 23 61 75 40 13 00 01 .R.......#au@... [020] 02 78 41 43 41 43 41 43 41 43 41 43 41 42 .xACACACACACAB 11:10:49.656978 B 0:c0:2:23:61:75 > Broadcast sap e0 ui/C IPX/SM i am seeing this on a friends network and trying to figure out wth is going on
