mpier1213
join:2001-10-06
New York, NY
| reply to Napsterbater
Re: Weird Ethernet broadcast issue.
There are not many MAC addresses in this trace. If you look you will see there are only a few that are used for non-broadcast traffic:
10.0.1.1 - is a 3Com NIC (00:26:54:13:dc:0a)
10.0.1.12 is an Asustek NIC (00:0e:a6:9d:d0:4c)
ALL other traffic is PPPoE traffic which uses the same Cisco MAC address (00:17:e0:bd:28:38).
It looks like the PPPoE/PPP adapter uses multiple IP addresses, but the same MAC address. |
|
Napsterbater
Premium
join:2002-12-28
Milledgeville, GA
 ·Windstream
 ·Charter Pipeline
| If you notice it all traffic destined TO (well internet via NAT) 10.0.1.3 -00:03:ff:60:c3:56, pppoe adapter (via PPPoE from the DSL Modem Bridge which is the Cisco MAC) - 00:03:ff:63:c3:56 (PPPoE Adapter is hooked to the switch with the DSL modem, and yes there is a reason) and 10.0.0.1 - 00:03:ff:62:c3:56, those are the MACs/IPs of a MS Virtual PC 2007 with m0n0wall running, m0n0wall has 3 vNics attached to 1 port of the server running MS V PC (If you think about it's like having a 5 port switch with 1 hooked to the server 3 to a m0n0wall and 1 back to the 16 port)
p.s.: These switches as I said before are dumb no management. |
|
