Claudio Antonioli wrote:
All my scans show a frame type of 802.3, although the PCs in the office,
as well as the servers, run frame type 802.2.
Ethereal doesn't display the "frame type" in the Netware sense. 802.2
and 802.3, in Ethereal, refer to the IEEE standards in question; 802.3
refers to packets that follow that standard and that have a length field
rather than a type field ("Ethernet II" refers to the packets with the a
type field), and 802.2 refers to the headers for *that* standard, which
are used not only with 802.3-with-length-field Ethernet packets but also
with Token Ring, FDDI, 802.11, etc. packets.
According to Don Provan's document:
http://www.ee.siue.edu/~bnoble/comp/networks/frametypes.html
there are four frame types for Netware:
802.2 - this is 802.3-with-a-length-field on Ethernet, and just the
standard link-layer type for Token Ring, etc., plus an 802.2 header with
a DSAP that specifies Netware;
802.3 - this is 802.3-with-a-length-field and *NO* 802.2 header;
Ethernet II - this is 802.3-with-a-type-field (a/k/a "DIX
(DEC-Intel-Xerox) Ethernet" or "Ethernet II" (as in "successor to the
original experimental 3Mb Ethernet), with an Ethernet type value that
specifies Netware;
Ethernet SNAP - this is 802.3-with-a-length-field, and just the
standard link-layer type for Token Ring, etc., plus an 802.2 header with
0xAA as the DSAP and SSAP, followed by a SNAP header with an OUI of
000000 meaning "Encapsulated Ethernet" and a PID (which, with an OUI of
000000, is an Ethernet type) that specifies Netware.
So "Frame type 802.2" is probably 802.3 and 802.2, so Ethereal will show
both 802.3 and 802.2, which is what it should display.
