2 # Well-known addresses.
6 # Wireshark - Network traffic analyzer
7 # By Gerald Combs <gerald [AT] wireshark.org>
8 # Copyright 1998 Gerald Combs
10 # This program is free software; you can redistribute it and/or
11 # modify it under the terms of the GNU General Public License
12 # as published by the Free Software Foundation; either version 2
13 # of the License, or (at your option) any later version.
15 # This program is distributed in the hope that it will be useful,
16 # but WITHOUT ANY WARRANTY; without even the implied warranty of
17 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 # GNU General Public License for more details.
20 # You should have received a copy of the GNU General Public License
21 # along with this program; if not, write to the Free Software
22 # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
24 # The data below has been assembled from the following sources:
26 # Michael Patton's "Ethernet Codes Master Page" available from:
27 # <http://www.cavebear.com/CaveBear/Ethernet/>
28 # <ftp://ftp.cavebear.com/pub/Ethernet.txt>
30 # Microsoft Windows 2000 Server
32 # Network Load Balancing Technical Overview
35 00-00-0C-07-AC/40 All-HSRP-routers
36 00-00-5E-00-01/40 IETF-VRRP-VRID
37 00-BF-00-00-00-00/16 MS-NLB-VirtServer
38 00-E0-2B-00-00-00 Extreme-EDP
39 # Extreme Encapsulation Protocol (basically EDP renamed)
40 00-E0-2B-00-00-01 Extreme-EEP
41 00-E0-2B-00-00-02 Extreme-ESRP-Client
42 00-E0-2B-00-00-04 Extreme-EAPS
43 00-E0-2B-00-00-06 Extreme-EAPS-SL
44 00-E0-2B-00-00-08 Extreme-ESRP-Master
45 01-00-0C-00-00/40 ISL-Frame
46 01-00-0C-CC-CC-CC CDP/VTP/DTP/PAgP/UDLD
47 01-00-0C-CC-CC-CD PVST+
48 01-00-0C-CD-CD-CD STP-UplinkFast
49 01-00-0C-CD-CD-CE VLAN-bridge
50 01-00-0C-CD-CD-D0 GBPT
51 01-00-0C-DD-DD-DD CGMP
52 01-00-10-00-00-20 Hughes-Lan-Systems-Terminal-Server-S/W-download
53 01-00-10-FF-FF-20 Hughes-Lan-Systems-Terminal-Server-S/W-request
54 01-00-1D-00-00-00 Cabletron-PC-OV-PC-discover-(on-demand)
55 01-00-1D-00-00-05 Cabletron-PVST-BPDU
56 01-00-1D-00-00-06 Cabletron-QCSTP-BPDU
57 01-00-1D-42-00-00 Cabletron-PC-OV-Bridge-discover-(on-demand)
58 01-00-1D-52-00-00 Cabletron-PC-OV-MMAC-discover-(on-demand)
59 01-00-3C Auspex-Systems-(Serverguard)
61 01-00-81-00-00-00 Nortel-Network-Management
62 01-00-81-00-00-02 Nortel-Network-Management
63 01-00-81-00-01-00 Nortel-autodiscovery
64 01-00-81-00-01-01 Nortel-autodiscovery
68 # http://www.t11.org/ftp/t11/pub/fc/bb-5/08-334v0.pdf
70 # Broadcom "donated" one of their OUIs, 00-10-18, for use for
71 # Fibre Channel over Ethernet, so we add entries for the
72 # addresses in that document and a group of addresses for all
73 # otherwise unlisted 01-10-18-XX-XX-XX addresses.
75 01-10-18-01-00-00 All-FCoE-MACs
76 01-10-18-01-00-01 All-ENode-MACs
77 01-10-18-01-00-02 All-FCF-MACs
78 01-10-18-00-00-00/24 FCoE-group
79 01-11-1E-00-00-01 EPLv2_SoC
80 01-11-1E-00-00-02 EPLv2_PRes
81 01-11-1E-00-00-03 EPLv2_SoA
82 01-11-1E-00-00-04 EPLv2_ASnd
83 01-20-25/25 Control-Technology-Inc's-Industrial-Ctrl-Proto.
84 01-80-24-00-00-00 Kalpana-Etherswitch-every-60-seconds
85 01-80-C2-00-00-00/44 Spanning-tree-(for-bridges)
86 01-80-C2-00-00-02 Slow-Protocols
87 01-80-C2-00-00-03 Nearest customer bridge
88 01-80-C2-00-00-0E LLDP_Multicast
89 01-80-C2-00-00-0F Nearest non-TPMR bridge
90 01-80-C2-00-00-10 Bridge-Management
91 01-80-C2-00-00-11 Load-Server
92 01-80-C2-00-00-12 Loadable-Device
93 01-80-C2-00-00-14 ISIS-all-level-1-IS's
94 01-80-C2-00-00-15 ISIS-all-level-2-IS's
95 01-80-C2-00-01-00 FDDI-RMT-Directed-Beacon
96 01-80-C2-00-01-10 FDDI-status-report-frame
97 01-DD-00-FF-FF-FF Ungermann-Bass-boot-me-requests
98 01-DD-01-00-00-00 Ungermann-Bass-Spanning-Tree
99 01-E0-52-CC-CC-CC Foundry-DP
100 # Microsoft Network Load Balancing (NLB)
101 # Actually, 02-01-virtualip to 02-20-virtualip will be used from server to rest-of-world
102 # 02-bf-virtualip will be used from rest-of-world to server
103 02-BF-00-00-00-00/16 MS-NLB-VirtServer
104 02-01-00-00-00-00/16 MS-NLB-PhysServer-01
105 02-02-00-00-00-00/16 MS-NLB-PhysServer-02
106 02-03-00-00-00-00/16 MS-NLB-PhysServer-03
107 02-04-00-00-00-00/16 MS-NLB-PhysServer-04
108 02-05-00-00-00-00/16 MS-NLB-PhysServer-05
109 02-06-00-00-00-00/16 MS-NLB-PhysServer-06
110 02-07-00-00-00-00/16 MS-NLB-PhysServer-07
111 02-08-00-00-00-00/16 MS-NLB-PhysServer-08
112 02-09-00-00-00-00/16 MS-NLB-PhysServer-09
113 02-0a-00-00-00-00/16 MS-NLB-PhysServer-10
114 02-0b-00-00-00-00/16 MS-NLB-PhysServer-11
115 02-0c-00-00-00-00/16 MS-NLB-PhysServer-12
116 02-0d-00-00-00-00/16 MS-NLB-PhysServer-13
117 02-0e-00-00-00-00/16 MS-NLB-PhysServer-14
118 02-0f-00-00-00-00/16 MS-NLB-PhysServer-15
119 02-10-00-00-00-00/16 MS-NLB-PhysServer-16
120 02-11-00-00-00-00/16 MS-NLB-PhysServer-17
121 02-12-00-00-00-00/16 MS-NLB-PhysServer-18
122 02-13-00-00-00-00/16 MS-NLB-PhysServer-19
123 02-14-00-00-00-00/16 MS-NLB-PhysServer-20
124 02-15-00-00-00-00/16 MS-NLB-PhysServer-21
125 02-16-00-00-00-00/16 MS-NLB-PhysServer-22
126 02-17-00-00-00-00/16 MS-NLB-PhysServer-23
127 02-18-00-00-00-00/16 MS-NLB-PhysServer-24
128 02-19-00-00-00-00/16 MS-NLB-PhysServer-25
129 02-1a-00-00-00-00/16 MS-NLB-PhysServer-26
130 02-1b-00-00-00-00/16 MS-NLB-PhysServer-27
131 02-1c-00-00-00-00/16 MS-NLB-PhysServer-28
132 02-1d-00-00-00-00/16 MS-NLB-PhysServer-29
133 02-1e-00-00-00-00/16 MS-NLB-PhysServer-30
134 02-1f-00-00-00-00/16 MS-NLB-PhysServer-31
135 02-20-00-00-00-00/16 MS-NLB-PhysServer-32
137 # [ The following block of addresses (03-...) are used by various ]
138 # [ standards. Some (marked [TR?]) are suspected of only being ]
139 # [ used on Token Ring for group addresses of Token Ring specific ]
140 # [ functions, reference ISO 8802-5:1995 aka. IEEE 802.5:1995 for ]
141 # [ some info. These in the Ethernet order for this list. On ]
142 # [ Token Ring they appear reversed. They should never appear on ]
143 # [ Ethernet. Others, not so marked, are normal reports (may be ]
145 03-00-00-00-00-01 NETBIOS-# [TR?]
146 03-00-00-00-00-02 Locate-Directory-Server # [TR?]
147 03-00-00-00-00-04 Synchronous-Bandwidth-Manager-# [TR?]
148 03-00-00-00-00-08 Configuration-Report-Server-# [TR?]
149 03-00-00-00-00-10 Ring-Error-Monitor-# [TR?]
150 03-00-00-00-00-10 (OS/2-1.3-EE+Communications-Manager)
151 03-00-00-00-00-20 Network-Server-Heartbeat-# [TR?]
152 03-00-00-00-00-40 (OS/2-1.3-EE+Communications-Manager)
153 03-00-00-00-00-80 Active-Monitor # [TR?]
154 03-00-00-00-01-00 OSI-All-IS-Token-Ring-Multicast
155 03-00-00-00-02-00 OSI-All-ES-Token-Ring-Multicast
156 03-00-00-00-04-00 LAN-Manager # [TR?]
157 03-00-00-00-08-00 Ring-Wiring-Concentrator # [TR?]
158 03-00-00-00-10-00 LAN-Gateway # [TR?]
159 03-00-00-00-20-00 Ring-Authorization-Server # [TR?]
160 03-00-00-00-40-00 IMPL-Server # [TR?]
161 03-00-00-00-80-00 Bridge # [TR?]
162 03-00-00-20-00-00 IP-Token-Ring-Multicast (RFC1469)
163 03-00-00-80-00-00 Discovery-Client
164 03-00-0C-00-00/40 ISL-Frame [TR?]
165 03-00-C7-00-00-EE HP (Compaq) ProLiant NIC teaming
166 03-00-FF-FF-FF-FF All-Stations-Address
167 03-BF-00-00-00-00/16 MS-NLB-VirtServer-Multicast
168 09-00-07-00-00-00/40 AppleTalk-Zone-multicast-addresses
169 # only goes through 09-00-07-00-00-FC?
170 09-00-07-FF-FF-FF AppleTalk-broadcast-address
171 09-00-09-00-00-01 HP-Probe
172 09-00-09-00-00-04 HP-DTC
173 09-00-0D-00-00-00/24 ICL-Oslan-Multicast
174 09-00-0D-02-00-00 ICL-Oslan-Service-discover-only-on-boot
175 09-00-0D-02-0A-38 ICL-Oslan-Service-discover-only-on-boot
176 09-00-0D-02-0A-39 ICL-Oslan-Service-discover-only-on-boot
177 09-00-0D-02-0A-3C ICL-Oslan-Service-discover-only-on-boot
178 09-00-0D-02-FF-FF ICL-Oslan-Service-discover-only-on-boot
179 09-00-0D-09-00-00 ICL-Oslan-Service-discover-as-required
180 09-00-1E-00-00-00 Apollo-DOMAIN
181 09-00-2B-00-00-00 DEC-MUMPS?
182 09-00-2B-00-00-01 DEC-DSM/DDP
183 09-00-2B-00-00-02 DEC-VAXELN?
184 09-00-2B-00-00-03 DEC-Lanbridge-Traffic-Monitor-(LTM)
185 09-00-2B-00-00-04 DEC-MAP-(or-OSI?)-End-System-Hello?
186 09-00-2B-00-00-05 DEC-MAP-(or-OSI?)-Intermediate-System-Hello?
187 09-00-2B-00-00-06 DEC-CSMA/CD-Encryption?
188 09-00-2B-00-00-07 DEC-NetBios-Emulator?
189 09-00-2B-00-00-0F DEC-Local-Area-Transport-(LAT)
190 09-00-2B-00-00-10/44 DEC-Experimental
191 09-00-2B-01-00-00 DEC-LanBridge-Copy-packets-(All-bridges)
192 09-00-2B-01-00-01 DEC-LanBridge-Hello-packets-(All-local-bridges)
193 09-00-2B-02-00-00 DEC-DNA-Level-2-Routing-Layer-routers?
194 09-00-2B-02-01-00 DEC-DNA-Naming-Service-Advertisement?
195 09-00-2B-02-01-01 DEC-DNA-Naming-Service-Solicitation?
196 09-00-2B-02-01-09 DEC-Availability-Manager-for-Distributed-Systems-DECamds
197 09-00-2B-02-01-02 DEC-Distributed-Time-Service
198 09-00-2B-03-00-00/32 DEC-default-filtering-by-bridges?
199 09-00-2B-04-00-00 DEC-Local-Area-System-Transport-(LAST)?
200 09-00-2B-23-00-00 DEC-Argonaut-Console?
201 09-00-4C-00-00-00 BICC-802.1-management
202 09-00-4C-00-00-02 BICC-802.1-management
203 09-00-4C-00-00-06 BICC-Local-bridge-STA-802.1(D)-Rev6
204 09-00-4C-00-00-0C BICC-Remote-bridge-STA-802.1(D)-Rev8
205 09-00-4C-00-00-0F BICC-Remote-bridge-ADAPTIVE-ROUTING
206 09-00-56-FF-00-00/32 Stanford-V-Kernel,-version-6.0
207 09-00-6A-00-01-00 TOP-NetBIOS.
208 09-00-77-00-00-00 Retix-Bridge-Local-Management-System
209 09-00-77-00-00-01 Retix-spanning-tree-bridges
210 09-00-77-00-00-02 Retix-Bridge-Adaptive-routing
211 09-00-7C-01-00-01 Vitalink-DLS-Multicast
212 09-00-7C-01-00-03 Vitalink-DLS-Inlink
213 09-00-7C-01-00-04 Vitalink-DLS-and-non-DLS-Multicast
214 09-00-7C-02-00-05 Vitalink-diagnostics
215 09-00-7C-05-00-01 Vitalink-gateway?
216 09-00-7C-05-00-02 Vitalink-Network-Validation-Message
217 09-00-87-80-FF-FF Xyplex-Terminal-Servers
218 09-00-87-90-FF-FF Xyplex-Terminal-Servers
219 0C-00-0C-00-00/40 ISL-Frame
221 20-52-45-43-56-00/40 Receive
222 20-53-45-4E-44-00/40 Send
223 33-33-00-00-00-00 IPv6-Neighbor-Discovery
224 33-33-00-00-00-00/16 IPv6mcast
225 AA-00-03-00-00-00/32 DEC-UNA
226 AA-00-03-01-00-00/32 DEC-PROM-AA
227 AA-00-03-03-00-00/32 DEC-NI20
228 AB-00-00-01-00-00 DEC-MOP-Dump/Load-Assistance
229 AB-00-00-02-00-00 DEC-MOP-Remote-Console
230 AB-00-00-03-00-00 DECNET-Phase-IV-end-node-Hello-packets
231 AB-00-00-04-00-00 DECNET-Phase-IV-Router-Hello-packets
232 AB-00-03-00-00-00 DEC-Local-Area-Transport-(LAT)-old
233 AB-00-04-01-00-00/32 DEC-Local-Area-VAX-Cluster-groups-SCA
234 CF-00-00-00-00-00 Ethernet-Configuration-Test-protocol-(Loopback)
235 FF-FF-00-60-00-04 Lantastic
236 FF-FF-00-40-00-01 Lantastic
237 FF-FF-01-E0-00-04 Lantastic
239 FF-FF-FF-FF-FF-FF Broadcast