[Ilugc] traffic

[Binand Sethumadhavan]

On Wed, 30 Mar 2005 10:04:12 +0530, Damodh K <damodh.k at gmail.com> wrote:
> 10:04:01.993751 48:9c:fe:75:01:10 > 01:80:c2:00:00:01, ethertype
> Unknown (0x8808), length 60:
>         0x0000:  0001 0000 0000 8808 0001 0000 0000 8808  ................
>         0x0010:  0001 0000 0000 8808 0001 0000 0000 8808  ................
>         0x0020:  0001 0000 0000 8808 0001 0000 0000       ..............

Needs more info. Ethertype 0x8808 is flow control, which is typically
used by switches. What were you doing (the two MAC addresses you have
do not appear to be listed in any MAC address->vendor mapping)?

It could be a worm, it could be a DoS attack, it could be a faulty NIC
- anything so far.

Binand