Options

anatomy of a hello packet

binaribinari Member Posts: 26 ■□□□□□□□□□
QUIGON_ML_SWITCH# (FastEthernet0/24), d=224.0.0.10, len 60, rcvd 2
03:48:17: IP: s=10.1.2.1 (FastEthernet0/24), d=224.0.0.10, len 60, stop process pak for forus packet
03:48:17: IP: s=10.1.24.1 (FastEthernet0/1), d=224.0.0.10, len 60, rcvd 2
03:48:17: IP: s=10.1.24.1 (FastEthernet0/1), d=224.0.0.10, len 60, stop process pak for forus packet
03:48:17: IP: s=10.1.24.2 (local), d=224.0.0.10 (FastEthernet0/1), len 60, sending broad/multicast
03:48:17: IP: s=10.1.24.2 (local), d=224.0.0.10 (FastEthernet0/1), len 60, sendin
QUIGON_ML_SWITCH#g full packet
03:48:18: IP: s=10.1.2.5 (local), d=224.0.0.10 (FastEthernet0/24), len 60, sending broad/multicast
03:48:18: IP: s=10.1.2.5 (local), d=224.0.0.10 (FastEthernet0/24), len 60, sending full packet
03:48:18: IP: s=10.1.2.1 (FastEthernet0/24), d=224.0.0.10, len 60, rcvd 2
03:48:18: IP: s=10.1.2.1 (FastEthernet0/24), d=224.0.0.10, len 60, stop process pak for forus packet
03:48:18: IP: s=10.1.24.1 (FastEthernet0/1), d=224.0.0.10, len 60, rcvd 2
03:48:18: IP: s=10.1.24.1 (FastEthernet0/1), d=2
QUIGON_ML_SWITCH#24.0.0.10, len 60, stop process pak for forus packet
03:48:18: IP: s=10.1.24.2 (local), d=224.0.0.10 (FastEthernet0/1), len 60, sending broad/multicast
03:48:18: IP: s=10.1.24.2 (local), d=224.0.0.10 (FastEthernet0/1), len 60, sending full packet
03:48:19: IP: s=10.1.2.5 (local), d=224.0.0.10 (FastEthernet0/24), len 60, sending broad/multicast
03:48:19: IP: s=10.1.2.5 (local), d=224.0.0.10 (FastEthernet0/24), len 60, sending full packet
03:48:19: IP: s=10.1.24.1 (FastEthernet0/1), d=224.0.0.10, len 60
QUIGON_ML_SWITCH#, rcvd 2
03:48:19: IP: s=10.1.24.1 (FastEthernet0/1), d=224.0.0.10, len 60, stop process pak for forus packet
03:48:19: IP: s=10.1.2.1 (FastEthernet0/24), d=224.0.0.10, len 60, rcvd 2
03:48:19: IP: s=10.1.2.1 (FastEthernet0/24), d=224.0.0.10, len 60, stop process pak for forus packet
03:48:19: IP: s=10.1.24.2 (local), d=224.0.0.10 (FastEthernet0/1), len 60, sending broad/multicast
03:48:19: IP: s=10.1.24.2 (local), d=224.0.0.10 (FastEthernet0/1), len 60, sending full packet


anyone know what "len 60" means? and what is "forus packet" sorry, im studying and cant seem to find this info anywhere.
Doh

Comments

  • Options
    ColbyGColbyG Member Posts: 1,264
    "len" is probably length, not sure what "forus packet" means.
  • Options
    networker050184networker050184 Mod Posts: 11,962 Mod
    The len 60 is the length in bytes like Colby said. Not sure what the forus is either though.

    EDIT: Just a guess, but it seems like it might be a CPU interrupt to send the packet maybe...
    An expert is a man who has made all the mistakes which can be made.
  • Options
    binaribinari Member Posts: 26 ■□□□□□□□□□
    thank you gentlemen (or ladies). I appreciate your knowledge.
    Doh
  • Options
    ColbyGColbyG Member Posts: 1,264
    Actually, I think it means it's processing the packet it received... the packet was for us. I could be wrong, but that's what just clicked in my head.
  • Options
    networker050184networker050184 Mod Posts: 11,962 Mod
    ColbyNA wrote: »
    Actually, I think it means it's processing the packet it received... the packet was for us. I could be wrong, but that's what just clicked in my head.


    Yeah that makes more sense.
    An expert is a man who has made all the mistakes which can be made.
  • Options
    tech-airmantech-airman Member Posts: 953
    binari wrote: »
    QUIGON_ML_SWITCH# (FastEthernet0/24), d=224.0.0.10, len 60, rcvd 2
    03:48:17: IP: s=10.1.2.1 (FastEthernet0/24), d=224.0.0.10, len 60, stop process pak for forus packet
    03:48:17: IP: s=10.1.24.1 (FastEthernet0/1), d=224.0.0.10, len 60, rcvd 2
    03:48:17: IP: s=10.1.24.1 (FastEthernet0/1), d=224.0.0.10, len 60, stop process pak for forus packet
    03:48:17: IP: s=10.1.24.2 (local), d=224.0.0.10 (FastEthernet0/1), len 60, sending broad/multicast
    03:48:17: IP: s=10.1.24.2 (local), d=224.0.0.10 (FastEthernet0/1), len 60, sendin
    QUIGON_ML_SWITCH#g full packet
    03:48:18: IP: s=10.1.2.5 (local), d=224.0.0.10 (FastEthernet0/24), len 60, sending broad/multicast
    03:48:18: IP: s=10.1.2.5 (local), d=224.0.0.10 (FastEthernet0/24), len 60, sending full packet
    03:48:18: IP: s=10.1.2.1 (FastEthernet0/24), d=224.0.0.10, len 60, rcvd 2
    03:48:18: IP: s=10.1.2.1 (FastEthernet0/24), d=224.0.0.10, len 60, stop process pak for forus packet
    03:48:18: IP: s=10.1.24.1 (FastEthernet0/1), d=224.0.0.10, len 60, rcvd 2
    03:48:18: IP: s=10.1.24.1 (FastEthernet0/1), d=2
    QUIGON_ML_SWITCH#24.0.0.10, len 60, stop process pak for forus packet
    03:48:18: IP: s=10.1.24.2 (local), d=224.0.0.10 (FastEthernet0/1), len 60, sending broad/multicast
    03:48:18: IP: s=10.1.24.2 (local), d=224.0.0.10 (FastEthernet0/1), len 60, sending full packet
    03:48:19: IP: s=10.1.2.5 (local), d=224.0.0.10 (FastEthernet0/24), len 60, sending broad/multicast
    03:48:19: IP: s=10.1.2.5 (local), d=224.0.0.10 (FastEthernet0/24), len 60, sending full packet
    03:48:19: IP: s=10.1.24.1 (FastEthernet0/1), d=224.0.0.10, len 60
    QUIGON_ML_SWITCH#, rcvd 2
    03:48:19: IP: s=10.1.24.1 (FastEthernet0/1), d=224.0.0.10, len 60, stop process pak for forus packet
    03:48:19: IP: s=10.1.2.1 (FastEthernet0/24), d=224.0.0.10, len 60, rcvd 2
    03:48:19: IP: s=10.1.2.1 (FastEthernet0/24), d=224.0.0.10, len 60, stop process pak for forus packet
    03:48:19: IP: s=10.1.24.2 (local), d=224.0.0.10 (FastEthernet0/1), len 60, sending broad/multicast
    03:48:19: IP: s=10.1.24.2 (local), d=224.0.0.10 (FastEthernet0/1), len 60, sending full packet


    anyone know what "len 60" means? and what is "forus packet" sorry, im studying and cant seem to find this info anywhere.

    binari,

    For your "forus packet" question, check out PDF page 13 of 39 in the following document titled "ISP Infrastructure & Operational Security"

    ISP Infrastructure & Operational Security - http://www.cisco.com/web/ME/exposaudi2009/assets/docs/isp_security_routing_and_switching.pdf
  • Options
    networker050184networker050184 Mod Posts: 11,962 Mod
    Nice find. I looked for a few minutes but couldn't find anything.
    An expert is a man who has made all the mistakes which can be made.
  • Options
    CyanicCyanic Member Posts: 289
    The len 60 is the length in bytes like Colby said.

    The length here is most likely just the length of the datagram as represented in the IP header.
Sign In or Register to comment.