What are these frames for? 0x6002

Unanswered Question
Feb 5th, 2008
User Badges:

Hello everybody,


Can somebody shed any light on this? Or even know who to alter this behaviour(filter, disable, etc)?


I have a capture running on an ethernet interface of a 3640 with IOS c3640-jk9o3s-mz.123-14.T7.bin

CDP and keepalives are disabled, no routing, no ip addresses configured.

Still Wireshark shows me that the interface is sending frames with a protocol id of 0x6002 (DEC DNA Remote Console) around every 515 to 705 seconds.

What are these frames for?


Regards,


Dirk




Attachment: 
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
David Stanford Wed, 02/06/2008 - 13:03
User Badges:
  • Cisco Employee,

These are DECNET MOP packets


If you do a "no mop enable" on the interface do these packets stop?

d.wingert Mon, 02/11/2008 - 04:11
User Badges:

Hello David,


It does indeed! Thank you very much!


Now to my next question :-)

Why does a pretty recent IOS like c3640-jk9o3s-mz.123-14.T7.bin still have the advertisement of these frames as a default?


Considering things like security and running extra processes etc; shouldn't stuff like this be removed from the default behaviour of the IOS?


Regards, Dirk

Actions

This Discussion