What are these frames for? 0x6002

Unanswered Question
Feb 5th, 2008

Hello everybody,

Can somebody shed any light on this? Or even know who to alter this behaviour(filter, disable, etc)?

I have a capture running on an ethernet interface of a 3640 with IOS c3640-jk9o3s-mz.123-14.T7.bin

CDP and keepalives are disabled, no routing, no ip addresses configured.

Still Wireshark shows me that the interface is sending frames with a protocol id of 0x6002 (DEC DNA Remote Console) around every 515 to 705 seconds.

What are these frames for?

Regards,

Dirk

Attachment: 
I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
David Stanford Wed, 02/06/2008 - 13:03

These are DECNET MOP packets

If you do a "no mop enable" on the interface do these packets stop?

d.wingert Mon, 02/11/2008 - 04:11

Hello David,

It does indeed! Thank you very much!

Now to my next question :-)

Why does a pretty recent IOS like c3640-jk9o3s-mz.123-14.T7.bin still have the advertisement of these frames as a default?

Considering things like security and running extra processes etc; shouldn't stuff like this be removed from the default behaviour of the IOS?

Regards, Dirk

Actions

This Discussion