6500 netdr strange srcmac 0000.XY00.0000

[andy!doesnt!like!uucp]

Hi Guys

with the netdr capture i'm getting the frames like below on the different 6500 platforms with srcmacs i totally can't understand. Please save my mind with explanation :)

------- dump of outgoing inband packet -------
l2idb NULL, l3idb IB0/0, routine draco2_ibc_soutput_guts, timestamp 09:20:49.931
dbus info: src_vlan 0x0(0), src_indx 0x7DF0(32240), len 0x40(64)
bpdu 1, index_dir 1, flood 0, dont_lrn 0, dest_indx 0x7DF0(32240), CoS 5
cap1 0, cap2 0
05000012 00007800 7DF00000 40020000 00000000 05000000 00000000 7DF00000
mistral hdr: req_token 0x0(0), src_index 0x7DF0(32240), rx_offset 0x30(48)
requeue 0, obl_pkt 0, vlan 0x0(0)
destmac 01.80.C2.00.00.00, srcmac 00.00.15.00.00.00, ethertype 001B
layer 3 data: AAAA0300 000C010F 14040003 001A0019 E56E0001 00000021
41E30300 00000000 00000000 00000000 00000000 00000000
0000

------- dump of incoming inband packet -------
l2idb NULL, l3idb NULL, routine mistral_process_rx_packet_inlin, timestamp 09:20:49.931
dbus info: src_vlan 0x0(0), src_indx 0x7DFB(32251), len 0x5DE(1502)
bpdu 1, index_dir 1, flood 0, dont_lrn 0, dest_indx 0x7DFB(32251), CoS 5
cap1 0, cap2 0
F5020012 00007800 7DFB0005 DE020000 9E000000 00000008 00000010 7DFBEFDD
mistral hdr: req_token 0x0(0), src_index 0x7DFB(32251), rx_offset 0x76(118)
requeue 0, obl_pkt 0, vlan 0x0(0)
destmac 01.80.C2.00.00.00, srcmac 00.00.05.00.00.00, ethertype 05CC
layer 3 data: AAAA0300 000C010F 041400DB 1A020019 E56E0101 00000012
41000300 000000AA F1341500 000000E7 F3F70F00 00000003
09418F00 0000003A 207F0400 000000A7 98C0C300 000000AD
D3780B00 00000000 4F31

[Kevin Groves]

Cisco used to have a program called netdir parser just for this but they removed it off their site in January this year. It is advised to use Wireshark instead because it is the defecto program to analyze packet captures for all network landscapes.

[andy!doesnt!like!uucp]

Hi Kevin

It's quite a pity to have Netdr parser decomissioned... And actually i dont understand how Wireshark can be used in parsing pure Netdr output...

Anywas topic was about strange MAC addresses similar to 0000.0500.0000 & 0000.1500.0000.

Br Andy