what you say about this ?

Daniel Carrillo daniel.carrillo at gmail.com
Thu Aug 11 17:56:38 UTC 2005


El jue, 11-08-2005 a las 15:38 +0530, Joydeep Sarangi escribió:
> *hi Guys !! 
> this is a line from /var/log/messages 
> 
> Aug 5 09:01:56 server01 kernel: GEN-DUMP: IN=eth0 OUT=
> MAC=00:c0:9f:38:23:de:00:d0:02:76:c8:00:08:00
> SRC=xx.xx.xx.xx DST=xx.xx.xx.xx LEN=55 TOS=0x00 PREC=0x00 TTL=60 ID=43424 DF 
> PROTO=UDP SPT=53 DPT=59583 LEN=35 
> 
> 
>   Quote: MAC=00:c0:9f:38:23:de:00:d0:02:76:c8:00:08:00
> 
> is this a MAC addr of source or destination , generally MAC having 6 field, 
> if it is a combination of source and destination MAC , then why 4 more 
> values are there ? 
> any comment or suggestion ?
> *

Hi.

This trace corresponding to netfilter log, is a combination of src + dst
+ type

SRC MAC: 00:c0:9f:38:23:de
DST MAC: 00:d0:02:76:c8:00
Frame Type: 08:00 Internet IP (IPv4)
http://www.iana.org/assignments/ethernet-numbers

Regards.




More information about the redhat-list mailing list