anatomy of a hello packet

QUIGON_ML_SWITCH# (FastEthernet0/24), d=224.0.0.10, len 60, rcvd 2
03:48:17: IP: s=10.1.2.1 (FastEthernet0/24), d=224.0.0.10, len 60, stop process pak for forus packet
03:48:17: IP: s=10.1.24.1 (FastEthernet0/1), d=224.0.0.10, len 60, rcvd 2
03:48:17: IP: s=10.1.24.1 (FastEthernet0/1), d=224.0.0.10, len 60, stop process pak for forus packet
03:48:17: IP: s=10.1.24.2 (local), d=224.0.0.10 (FastEthernet0/1), len 60, sending broad/multicast
03:48:17: IP: s=10.1.24.2 (local), d=224.0.0.10 (FastEthernet0/1), len 60, sendin
QUIGON_ML_SWITCH#g full packet
03:48:18: IP: s=10.1.2.5 (local), d=224.0.0.10 (FastEthernet0/24), len 60, sending broad/multicast
03:48:18: IP: s=10.1.2.5 (local), d=224.0.0.10 (FastEthernet0/24), len 60, sending full packet
03:48:18: IP: s=10.1.2.1 (FastEthernet0/24), d=224.0.0.10, len 60, rcvd 2
03:48:18: IP: s=10.1.2.1 (FastEthernet0/24), d=224.0.0.10, len 60, stop process pak for forus packet
03:48:18: IP: s=10.1.24.1 (FastEthernet0/1), d=224.0.0.10, len 60, rcvd 2
03:48:18: IP: s=10.1.24.1 (FastEthernet0/1), d=2
QUIGON_ML_SWITCH#24.0.0.10, len 60, stop process pak for forus packet
03:48:18: IP: s=10.1.24.2 (local), d=224.0.0.10 (FastEthernet0/1), len 60, sending broad/multicast
03:48:18: IP: s=10.1.24.2 (local), d=224.0.0.10 (FastEthernet0/1), len 60, sending full packet
03:48:19: IP: s=10.1.2.5 (local), d=224.0.0.10 (FastEthernet0/24), len 60, sending broad/multicast
03:48:19: IP: s=10.1.2.5 (local), d=224.0.0.10 (FastEthernet0/24), len 60, sending full packet
03:48:19: IP: s=10.1.24.1 (FastEthernet0/1), d=224.0.0.10, len 60
QUIGON_ML_SWITCH#, rcvd 2
03:48:19: IP: s=10.1.24.1 (FastEthernet0/1), d=224.0.0.10, len 60, stop process pak for forus packet
03:48:19: IP: s=10.1.2.1 (FastEthernet0/24), d=224.0.0.10, len 60, rcvd 2
03:48:19: IP: s=10.1.2.1 (FastEthernet0/24), d=224.0.0.10, len 60, stop process pak for forus packet
03:48:19: IP: s=10.1.24.2 (local), d=224.0.0.10 (FastEthernet0/1), len 60, sending broad/multicast
03:48:19: IP: s=10.1.24.2 (local), d=224.0.0.10 (FastEthernet0/1), len 60, sending full packet

anyone know what "len 60" means? and what is "forus packet" sorry, im studying and cant seem to find this info anywhere.

Find more posts tagged with

Free for TechExams community: Cybersecurity salary guide

Compare cert salaries and plan your next career move

Button

Comments

ColbyG

"len" is probably length, not sure what "forus packet" means.

networker050184

The len 60 is the length in bytes like Colby said. Not sure what the forus is either though.

EDIT: Just a guess, but it seems like it might be a CPU interrupt to send the packet maybe...

binari

thank you gentlemen (or ladies). I appreciate your knowledge.

ColbyG

Actually, I think it means it's processing the packet it received... the packet was for us. I could be wrong, but that's what just clicked in my head.

networker050184

ColbyNA wrote: »

Actually, I think it means it's processing the packet it received... the packet was for us. I could be wrong, but that's what just clicked in my head.

Yeah that makes more sense.

tech-airman

binari wrote: »

QUIGON_ML_SWITCH# (FastEthernet0/24), d=224.0.0.10, len 60, rcvd 2
03:48:17: IP: s=10.1.2.1 (FastEthernet0/24), d=224.0.0.10, len 60, stop process pak for forus packet
03:48:17: IP: s=10.1.24.1 (FastEthernet0/1), d=224.0.0.10, len 60, rcvd 2
03:48:17: IP: s=10.1.24.1 (FastEthernet0/1), d=224.0.0.10, len 60, stop process pak for forus packet
03:48:17: IP: s=10.1.24.2 (local), d=224.0.0.10 (FastEthernet0/1), len 60, sending broad/multicast
03:48:17: IP: s=10.1.24.2 (local), d=224.0.0.10 (FastEthernet0/1), len 60, sendin
QUIGON_ML_SWITCH#g full packet
03:48:18: IP: s=10.1.2.5 (local), d=224.0.0.10 (FastEthernet0/24), len 60, sending broad/multicast
03:48:18: IP: s=10.1.2.5 (local), d=224.0.0.10 (FastEthernet0/24), len 60, sending full packet
03:48:18: IP: s=10.1.2.1 (FastEthernet0/24), d=224.0.0.10, len 60, rcvd 2
03:48:18: IP: s=10.1.2.1 (FastEthernet0/24), d=224.0.0.10, len 60, stop process pak for forus packet
03:48:18: IP: s=10.1.24.1 (FastEthernet0/1), d=224.0.0.10, len 60, rcvd 2
03:48:18: IP: s=10.1.24.1 (FastEthernet0/1), d=2
QUIGON_ML_SWITCH#24.0.0.10, len 60, stop process pak for forus packet
03:48:18: IP: s=10.1.24.2 (local), d=224.0.0.10 (FastEthernet0/1), len 60, sending broad/multicast
03:48:18: IP: s=10.1.24.2 (local), d=224.0.0.10 (FastEthernet0/1), len 60, sending full packet
03:48:19: IP: s=10.1.2.5 (local), d=224.0.0.10 (FastEthernet0/24), len 60, sending broad/multicast
03:48:19: IP: s=10.1.2.5 (local), d=224.0.0.10 (FastEthernet0/24), len 60, sending full packet
03:48:19: IP: s=10.1.24.1 (FastEthernet0/1), d=224.0.0.10, len 60
QUIGON_ML_SWITCH#, rcvd 2
03:48:19: IP: s=10.1.24.1 (FastEthernet0/1), d=224.0.0.10, len 60, stop process pak for forus packet
03:48:19: IP: s=10.1.2.1 (FastEthernet0/24), d=224.0.0.10, len 60, rcvd 2
03:48:19: IP: s=10.1.2.1 (FastEthernet0/24), d=224.0.0.10, len 60, stop process pak for forus packet
03:48:19: IP: s=10.1.24.2 (local), d=224.0.0.10 (FastEthernet0/1), len 60, sending broad/multicast
03:48:19: IP: s=10.1.24.2 (local), d=224.0.0.10 (FastEthernet0/1), len 60, sending full packet

anyone know what "len 60" means? and what is "forus packet" sorry, im studying and cant seem to find this info anywhere.

binari,

For your "forus packet" question, check out PDF page 13 of 39 in the following document titled "ISP Infrastructure & Operational Security"

ISP Infrastructure & Operational Security - http://www.cisco.com/web/ME/exposaudi2009/assets/docs/isp_security_routing_and_switching.pdf

networker050184

Nice find. I looked for a few minutes but couldn't find anything.

Cyanic

networker050184 wrote: »

The len 60 is the length in bytes like Colby said.

The length here is most likely just the length of the datagram as represented in the IP header.