Community discussions

MikroTik App
 
fcisoft
just joined
Topic Author
Posts: 2
Joined: Wed Jun 01, 2016 1:06 pm
Location: Ragusa

Undocumented ethernet protocol???

Sat Sep 07, 2019 4:07 pm

Hi all, today torching bridge of a customer i see strange traffic of 25-60mbit of a ethernet protocolo called aa55 with no src-add and dst-add 0.0.0.0 okay, it's a broadcast traffic but why is known but undocumented?
Searching on the web i cannot find any info about, what's this????
You do not have the required permissions to view the files attached to this post.
 
r00t
Long time Member
Long time Member
Posts: 672
Joined: Tue Nov 28, 2017 2:14 am

Re: Undocumented ethernet protocol???

Sat Sep 07, 2019 4:55 pm

This is quite common for data acquisition, scientific computing, etc. where FPGA cards are used, to have custom ethernet protocols for minimal overhead and ease of implementation, just absolute minimum to make the ethernet frames switchable.
Usually you configure source/destination MACs for the device to any values you need. Also protocol value is user configurable (so it's not any standard value). Then the device just starts spitting out the data...
There will be no IP addresses because there's no IP protocol used at all, usually some proprietary or custom protocol is used.
You could always use sniffer to sniff these frames and look at it closer, but if it's on customer LAN and it's not causing any issues for your network, why bother?
Last edited by r00t on Sun Sep 08, 2019 4:20 pm, edited 1 time in total.
 
User avatar
docmarius
Forum Guru
Forum Guru
Posts: 1222
Joined: Sat Nov 06, 2010 12:04 pm
Location: Timisoara, Romania
Contact:

Re: Undocumented ethernet protocol???

Sat Sep 07, 2019 8:19 pm

Probably some experimental stuff. AA55 is binary 1010101001010101 - so this is used to get alternating 1/0 bits which makes development/testing even more probable...
But as r00t has written, if it doesn't bother anyone...

Who is online

Users browsing this forum: fredcom and 48 guests