What are these frames for? 0x6002

Unanswered Question
Feb 5th, 2008
User Badges:

Hello everybody,

Can somebody shed any light on this? Or even know who to alter this behaviour(filter, disable, etc)?

I have a capture running on an ethernet interface of a 3640 with IOS c3640-jk9o3s-mz.123-14.T7.bin

CDP and keepalives are disabled, no routing, no ip addresses configured.

Still Wireshark shows me that the interface is sending frames with a protocol id of 0x6002 (DEC DNA Remote Console) around every 515 to 705 seconds.

What are these frames for?



  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
David Stanford Wed, 02/06/2008 - 13:03
User Badges:
  • Cisco Employee,

These are DECNET MOP packets

If you do a "no mop enable" on the interface do these packets stop?

d.wingert Mon, 02/11/2008 - 04:11
User Badges:

Hello David,

It does indeed! Thank you very much!

Now to my next question :-)

Why does a pretty recent IOS like c3640-jk9o3s-mz.123-14.T7.bin still have the advertisement of these frames as a default?

Considering things like security and running extra processes etc; shouldn't stuff like this be removed from the default behaviour of the IOS?

Regards, Dirk


This Discussion