Wireshark · Ethereal-users: Re: [Ethereal-users] Weird Cisco packet?

[Guy Harris <guy@xxxxxxxxxx>]

> Anyone know what this packet is?
> 
> Looks like some funky Cisco thing,

Or some funky company-bought-by-Cisco thing; according to

	http://standards.ieee.org/regauth/oui/oui.txt

the OUI in the SNAP header, 00-40-96, is owned by

	00-40-96   (hex)                Aironet Wireless Communication
	004096     (base 16)            Aironet Wireless Communication
	                                3875 Embassy Parkway    
	                                Aksron OH 44334

(yes, the entry really does misspell Akron), Aironet being, of course,
the company that Cisco bought, and the source of Cisco's 802.11 stuff.

However, that's all I know about it.  You'll probably have to try
searching the Web in general, or the Cisco Connection Documentation:

	http://www.cisco.com/univercd/home/home.htm

to see if you can find anything about it.  The SNAP PID is all zeroes.

> Whatever it is, Ethereal didn't know what to do with it.

That's true of a lot of packet types, especially the ones with unusual
Ethernet types, or unusual OUI/PID SNAP types, and it'll probably be
true for a long time to come (some of those protocols are undocumented).