wka

   1 #
   2 # Well-known addresses.
   3 #
   4 # Wireshark - Network traffic analyzer
   5 # By Gerald Combs <gerald [AT] wireshark.org>
   6 # Copyright 1998 Gerald Combs
   7 #
   8 # SPDX-License-Identifier: GPL-2.0-or-later
   9 #
  10 # The data below has been assembled from the following sources:
  11 #
  12 # Michael Patton's "Ethernet Codes Master Page" available from:
  13 # <http://www.cavebear.com/CaveBear/Ethernet/>
  14 # <ftp://ftp.cavebear.com/pub/Ethernet.txt>
  15 #
  16 # Microsoft Windows 2000 Server
  17 # Operating System
  18 # Network Load Balancing Technical Overview
  19 # White Paper
  20 #
  21 00-00-00-00-FE-21       Checkpoint-Uninitialized-Cluster-Member
  22 00-00-0C-07-AC/40       All-HSRP-routers
  23 00-00-5E-00-01/40       IETF-VRRP-VRID
  24 00-0C-0C-0C-0C-0C       Cisco-ACI-Gleaning-Leaf
  25 00-0D-0D-0D-0D-0D       Cisco-ACI-Gleaning-Spine
  26 00-BF-00-00-00-00/16    MS-NLB-VirtServer
  27 00-E0-2B-00-00-00       Extreme-EDP
  28 # Extreme Encapsulation Protocol (basically EDP renamed)
  29 00-E0-2B-00-00-01       Extreme-EEP
  30 00-E0-2B-00-00-02       Extreme-ESRP-Client
  31 00-E0-2B-00-00-04       Extreme-EAPS
  32 00-E0-2B-00-00-06       Extreme-EAPS-SL
  33 00-E0-2B-00-00-08       Extreme-ESRP-Master
  34 01-00-0C-00-00/40       ISL-Frame
  35 01-00-0C-CC-CC-CC       CDP/VTP/DTP/PAgP/UDLD
  36 01-00-0C-CC-CC-CD       PVST+
  37 01-00-0C-CD-CD-CD       STP-UplinkFast
  38 01-00-0C-CD-CD-CE       VLAN-bridge
  39 01-00-0C-CD-CD-D0       GBPT
  40 01-00-0C-DD-DD-DD       CGMP
  41 01-00-10-00-00-20       Hughes-Lan-Systems-Terminal-Server-S/W-download
  42 01-00-10-FF-FF-20       Hughes-Lan-Systems-Terminal-Server-S/W-request
  43 01-00-1D-00-00-00       Cabletron-PC-OV-PC-discover-(on-demand)
  44 01-00-1D-00-00-05       Cabletron-PVST-BPDU
  45 01-00-1D-00-00-06       Cabletron-QCSTP-BPDU
  46 01-00-1D-42-00-00       Cabletron-PC-OV-Bridge-discover-(on-demand)
  47 01-00-1D-52-00-00       Cabletron-PC-OV-MMAC-discover-(on-demand)
  48 01-00-3C                Auspex-Systems-(Serverguard)
  49 01-00-5E/25             IPv4mcast
  50 01-00-81-00-00-00       Nortel-Network-Management
  51 01-00-81-00-00-02       Nortel-Network-Management
  52 01-00-81-00-01-00       Nortel-autodiscovery
  53 01-00-81-00-01-01       Nortel-autodiscovery
  54 # Cisco Fabric Path
  55 01-0F-FF-C1-01-C0       FP-Flood-to-all-VLANs
  56 01-0F-FF-C1-02-C0       FP-Flood-to-all-Fabrics
  57 #
  58 # As per
  59 #
  60 #       http://www.t11.org/ftp/t11/pub/fc/bb-5/08-334v0.pdf
  61 #
  62 # Broadcom "donated" one of their OUIs, 00-10-18, for use for
  63 # Fibre Channel over Ethernet, so we add entries for the
  64 # addresses in that document and a group of addresses for all
  65 # otherwise unlisted 01-10-18-XX-XX-XX addresses.
  66 #
  67 01-10-18-01-00-00       All-FCoE-MACs
  68 01-10-18-01-00-01       All-ENode-MACs
  69 01-10-18-01-00-02       All-FCF-MACs
  70 01-10-18-00-00-00/24    FCoE-group
  71 01-11-1E-00-00-01       EPLv2_SoC
  72 01-11-1E-00-00-02       EPLv2_PRes
  73 01-11-1E-00-00-03       EPLv2_SoA
  74 01-11-1E-00-00-04       EPLv2_ASnd
  75 01-11-1E-00-00-05       EPLv2_AMNI
  76 01-20-25/25             Control-Technology-Inc's-Industrial-Ctrl-Proto.
  77 01-80-24-00-00-00       Kalpana-Etherswitch-every-60-seconds
  78 # IEEE 802.1Q-2018 Table 8-1, C-VLAN and MAC Bridge component Reserved addresses
  79 01-80-C2-00-00-00/44    Spanning-tree-(for-bridges)
  80 # 01-80-C2-00-00-00     also: Nearest customer bridge
  81 01-80-C2-00-00-01       MAC-specific-ctrl-proto-01
  82 01-80-C2-00-00-02       Slow-Protocols
  83 01-80-C2-00-00-03       Nearest-non-TPMR-bridge
  84 01-80-C2-00-00-04       MAC-specific-ctrl-proto-04
  85 01-80-C2-00-00-05       Reserved-future-std-05
  86 01-80-C2-00-00-06       Reserved-future-std-06
  87 01-80-C2-00-00-07       MEF-Forum-ELMI-proto
  88 01-80-C2-00-00-08       Provider-Bridge
  89 01-80-C2-00-00-09       Reserved-future-std-09
  90 01-80-C2-00-00-0A       Reserved-future-std-0a
  91 01-80-C2-00-00-0B       EDE-SS-PEP
  92 01-80-C2-00-00-0C       Reserved-future-std-0c
  93 01-80-C2-00-00-0D       Provider-Bridge-MVRP
  94 01-80-C2-00-00-0E       LLDP_Multicast
  95 01-80-C2-00-00-0F       Reserved-future-std-0f
  96 01-80-C2-00-00-10       Bridge-Management
  97 01-80-C2-00-00-11       Load-Server
  98 01-80-C2-00-00-12       Loadable-Device
  99 01-80-C2-00-00-13       IEEE-1905.1-Control
 100 01-80-C2-00-00-14       ISIS-all-level-1-IS's
 101 01-80-C2-00-00-15       ISIS-all-level-2-IS's
 102 01-80-C2-00-00-18       IEEE-802.1B-All-Manager-Stations
 103 01-80-C2-00-00-19       IEEE-802.11aa-groupcast-with-retries
 104 01-80-C2-00-00-1A       IEEE-802.1B-All-Agent-Stations
 105 01-80-C2-00-00-1B       ESIS-all-multicast-capable-ES's
 106 01-80-C2-00-00-1C       ESIS-all-multicast-announcements
 107 01-80-C2-00-00-1D       ESIS-all-multicast-capable-IS's
 108 01-80-C2-00-00-1E       Token-Ring-all-DTR-Concentrators
 109 01-80-C2-00-00-30/45    OAM-Multicast-DA-Class-1
 110 01-80-C2-00-00-38/45    OAM-Multicast-DA-Class-2
 111 01-80-C2-00-00-40       All-RBridges
 112 01-80-C2-00-00-41       All-IS-IS-RBridges
 113 01-80-C2-00-00-42       All-Egress-RBridges
 114 01-80-C2-00-00-45       TRILL-End-Stations
 115 01-80-C2-00-00-46       All-Edge-RBridges
 116 01-80-C2-00-01-00       FDDI-RMT-Directed-Beacon
 117 01-80-C2-00-01-10       FDDI-status-report-frame
 118 01-DD-00-FF-FF-FF       Ungermann-Bass-boot-me-requests
 119 01-DD-01-00-00-00       Ungermann-Bass-Spanning-Tree
 120 01-E0-52-CC-CC-CC       Foundry-DP
 121 # DOCSIS, defined in ANSI SCTE 22-1 2012
 122 01-E0-2F-00-00-01       DOCSIS-CM
 123 01-E0-2F-00-00-02       DOCSIS-CMTS
 124 01-E0-2F-00-00-03       DOCSIS-STP
 125
 126 # Extremenetworks in their infinite wisdom seems to use 02-04-94 (Vendor MAC XOR 02-00-00)
 127 # for their base mac address, thus colliding with MS-NLB 02-04/16 which Microsoft in their
 128 # infinite wisdom decided to use for MS-NLB.
 129 02-04-96-00-00-00/24    ExtremeNetworks
 130
 131 # Microsoft Network Load Balancing (NLB)
 132 # Actually, 02-01-virtualip to 02-20-virtualip will be used from server to rest-of-world
 133 # 02-bf-virtualip will be used from rest-of-world to server
 134 02-BF-00-00-00-00/16    MS-NLB-VirtServer
 135 02-01-00-00-00-00/16    MS-NLB-PhysServer-01
 136 02-02-00-00-00-00/16    MS-NLB-PhysServer-02
 137 02-03-00-00-00-00/16    MS-NLB-PhysServer-03
 138 02-04-00-00-00-00/16    MS-NLB-PhysServer-04
 139 02-05-00-00-00-00/16    MS-NLB-PhysServer-05
 140 02-06-00-00-00-00/16    MS-NLB-PhysServer-06
 141 02-07-00-00-00-00/16    MS-NLB-PhysServer-07
 142 02-08-00-00-00-00/16    MS-NLB-PhysServer-08
 143 02-09-00-00-00-00/16    MS-NLB-PhysServer-09
 144 02-0a-00-00-00-00/16    MS-NLB-PhysServer-10
 145 02-0b-00-00-00-00/16    MS-NLB-PhysServer-11
 146 02-0c-00-00-00-00/16    MS-NLB-PhysServer-12
 147 02-0d-00-00-00-00/16    MS-NLB-PhysServer-13
 148 02-0e-00-00-00-00/16    MS-NLB-PhysServer-14
 149 02-0f-00-00-00-00/16    MS-NLB-PhysServer-15
 150 02-10-00-00-00-00/16    MS-NLB-PhysServer-16
 151 02-11-00-00-00-00/16    MS-NLB-PhysServer-17
 152 02-12-00-00-00-00/16    MS-NLB-PhysServer-18
 153 02-13-00-00-00-00/16    MS-NLB-PhysServer-19
 154 02-14-00-00-00-00/16    MS-NLB-PhysServer-20
 155 02-15-00-00-00-00/16    MS-NLB-PhysServer-21
 156 02-16-00-00-00-00/16    MS-NLB-PhysServer-22
 157 02-17-00-00-00-00/16    MS-NLB-PhysServer-23
 158 02-18-00-00-00-00/16    MS-NLB-PhysServer-24
 159 02-19-00-00-00-00/16    MS-NLB-PhysServer-25
 160 02-1a-00-00-00-00/16    MS-NLB-PhysServer-26
 161 02-1b-00-00-00-00/16    MS-NLB-PhysServer-27
 162 02-1c-00-00-00-00/16    MS-NLB-PhysServer-28
 163 02-1d-00-00-00-00/16    MS-NLB-PhysServer-29
 164 02-1e-00-00-00-00/16    MS-NLB-PhysServer-30
 165 02-1f-00-00-00-00/16    MS-NLB-PhysServer-31
 166 02-20-00-00-00-00/16    MS-NLB-PhysServer-32
 167
 168 #       [ The following block of addresses (03-...) are used by various ]
 169 #       [ standards.  Some (marked [TR?]) are suspected of only being   ]
 170 #       [ used on Token Ring for group addresses of Token Ring specific ]
 171 #       [ functions, reference ISO 8802-5:1995 aka. IEEE 802.5:1995 for ]
 172 #       [ some info.  These in the Ethernet order for this list.  On    ]
 173 #       [ Token Ring they appear reversed.  They should never appear on ]
 174 #       [ Ethernet.  Others, not so marked, are normal reports (may be  ]
 175 #       [ seen on either).
 176 03-00-00-00-00-01       NETBIOS-# [TR?]
 177 03-00-00-00-00-02       Locate-Directory-Server # [TR?]
 178 03-00-00-00-00-04       Synchronous-Bandwidth-Manager-# [TR?]
 179 03-00-00-00-00-08       Configuration-Report-Server-# [TR?]
 180 03-00-00-00-00-10       Ring-Error-Monitor-# [TR?]
 181 03-00-00-00-00-10       (OS/2-1.3-EE+Communications-Manager)
 182 03-00-00-00-00-20       Network-Server-Heartbeat-# [TR?]
 183 03-00-00-00-00-40       (OS/2-1.3-EE+Communications-Manager)
 184 03-00-00-00-00-80       Active-Monitor # [TR?]
 185 03-00-00-00-01-00       OSI-All-IS-Token-Ring-Multicast
 186 03-00-00-00-02-00       OSI-All-ES-Token-Ring-Multicast
 187 03-00-00-00-04-00       LAN-Manager # [TR?]
 188 03-00-00-00-08-00       Ring-Wiring-Concentrator # [TR?]
 189 03-00-00-00-10-00       LAN-Gateway # [TR?]
 190 03-00-00-00-20-00       Ring-Authorization-Server # [TR?]
 191 03-00-00-00-40-00       IMPL-Server # [TR?]
 192 03-00-00-00-80-00       Bridge # [TR?]
 193 03-00-00-20-00-00       IP-Token-Ring-Multicast (RFC1469)
 194 03-00-00-80-00-00       Discovery-Client
 195 03-00-0C-00-00/40       ISL-Frame [TR?]
 196 03-00-C7-00-00-EE       HP (Compaq) ProLiant NIC teaming
 197 03-00-FF-FF-FF-FF       All-Stations-Address
 198 03-BF-00-00-00-00/16    MS-NLB-VirtServer-Multicast
 199 09-00-07-00-00-00/40    AppleTalk-Zone-multicast-addresses
 200                         # only goes through 09-00-07-00-00-FC?
 201 09-00-07-FF-FF-FF       AppleTalk-broadcast-address
 202 09-00-09-00-00-01       HP-Probe
 203 09-00-09-00-00-04       HP-DTC
 204 09-00-0D-00-00-00/24    ICL-Oslan-Multicast
 205 09-00-0D-02-00-00       ICL-Oslan-Service-discover-only-on-boot
 206 09-00-0D-02-0A-38       ICL-Oslan-Service-discover-only-on-boot
 207 09-00-0D-02-0A-39       ICL-Oslan-Service-discover-only-on-boot
 208 09-00-0D-02-0A-3C       ICL-Oslan-Service-discover-only-on-boot
 209 09-00-0D-02-FF-FF       ICL-Oslan-Service-discover-only-on-boot
 210 09-00-0D-09-00-00       ICL-Oslan-Service-discover-as-required
 211 09-00-1E-00-00-00       Apollo-DOMAIN
 212 09-00-2B-00-00-00       DEC-MUMPS?
 213 09-00-2B-00-00-01       DEC-DSM/DDP
 214 09-00-2B-00-00-02       DEC-VAXELN?
 215 09-00-2B-00-00-03       DEC-Lanbridge-Traffic-Monitor-(LTM)
 216 09-00-2B-00-00-04       DEC-MAP-(or-OSI?)-End-System-Hello?
 217 09-00-2B-00-00-05       DEC-MAP-(or-OSI?)-Intermediate-System-Hello?
 218 09-00-2B-00-00-06       DEC-CSMA/CD-Encryption?
 219 09-00-2B-00-00-07       DEC-NetBios-Emulator?
 220 09-00-2B-00-00-0F       DEC-Local-Area-Transport-(LAT)
 221 09-00-2B-00-00-10/44    DEC-Experimental
 222 09-00-2B-01-00-00       DEC-LanBridge-Copy-packets-(All-bridges)
 223 09-00-2B-01-00-01       DEC-LanBridge-Hello-packets-(All-local-bridges)
 224 09-00-2B-02-00-00       DEC-DNA-Level-2-Routing-Layer-routers?
 225 09-00-2B-02-01-00       DEC-DNA-Naming-Service-Advertisement?
 226 09-00-2B-02-01-01       DEC-DNA-Naming-Service-Solicitation?
 227 09-00-2B-02-01-09       DEC-Availability-Manager-for-Distributed-Systems-DECamds
 228 09-00-2B-02-01-02       DEC-Distributed-Time-Service
 229 09-00-2B-03-00-00/32    DEC-default-filtering-by-bridges?
 230 09-00-2B-04-00-00       DEC-Local-Area-System-Transport-(LAST)?
 231 09-00-2B-23-00-00       DEC-Argonaut-Console?
 232 09-00-4C-00-00-00       BICC-802.1-management
 233 09-00-4C-00-00-02       BICC-802.1-management
 234 09-00-4C-00-00-06       BICC-Local-bridge-STA-802.1(D)-Rev6
 235 09-00-4C-00-00-0C       BICC-Remote-bridge-STA-802.1(D)-Rev8
 236 09-00-4C-00-00-0F       BICC-Remote-bridge-ADAPTIVE-ROUTING
 237 09-00-56-FF-00-00/32    Stanford-V-Kernel,-version-6.0
 238 09-00-6A-00-01-00       TOP-NetBIOS.
 239 09-00-77-00-00-00       Retix-Bridge-Local-Management-System
 240 09-00-77-00-00-01       Retix-spanning-tree-bridges
 241 09-00-77-00-00-02       Retix-Bridge-Adaptive-routing
 242 09-00-7C-01-00-01       Vitalink-DLS-Multicast
 243 09-00-7C-01-00-03       Vitalink-DLS-Inlink
 244 09-00-7C-01-00-04       Vitalink-DLS-and-non-DLS-Multicast
 245 09-00-7C-02-00-05       Vitalink-diagnostics
 246 09-00-7C-05-00-01       Vitalink-gateway?
 247 09-00-7C-05-00-02       Vitalink-Network-Validation-Message
 248 09-00-87-80-FF-FF       Xyplex-Terminal-Servers
 249 09-00-87-90-FF-FF       Xyplex-Terminal-Servers
 250 0C-00-0C-00-00/40       ISL-Frame
 251 0D-1E-15-BA-DD-06       HP
 252 20-52-45-43-56-00/40    Receive
 253 20-53-45-4E-44-00/40    Send
 254 33-33-00-00-00-00       IPv6-Neighbor-Discovery
 255 33-33-00-00-00-00/16    IPv6mcast
 256 AA-00-03-00-00-00/32    DEC-UNA
 257 AA-00-03-01-00-00/32    DEC-PROM-AA
 258 AA-00-03-03-00-00/32    DEC-NI20
 259 AB-00-00-01-00-00       DEC-MOP-Dump/Load-Assistance
 260 AB-00-00-02-00-00       DEC-MOP-Remote-Console
 261 AB-00-00-03-00-00       DECNET-Phase-IV-end-node-Hello-packets
 262 AB-00-00-04-00-00       DECNET-Phase-IV-Router-Hello-packets
 263 AB-00-03-00-00-00       DEC-Local-Area-Transport-(LAT)-old
 264 AB-00-04-01-00-00/32    DEC-Local-Area-VAX-Cluster-groups-SCA
 265 CF-00-00-00-00-00       Ethernet-Configuration-Test-protocol-(Loopback)
 266 FF-FF-00-60-00-04       Lantastic
 267 FF-FF-00-40-00-01       Lantastic
 268 FF-FF-01-E0-00-04       Lantastic
 269
 270 FF-FF-FF-FF-FF-FF       Broadcast