cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Community Helping Community

3323
Views
5
Helpful
2
Replies
Beginner

What are these frames for? 0x6002

Hello everybody,

Can somebody shed any light on this? Or even know who to alter this behaviour(filter, disable, etc)?

I have a capture running on an ethernet interface of a 3640 with IOS c3640-jk9o3s-mz.123-14.T7.bin

CDP and keepalives are disabled, no routing, no ip addresses configured.

Still Wireshark shows me that the interface is sending frames with a protocol id of 0x6002 (DEC DNA Remote Console) around every 515 to 705 seconds.

What are these frames for?

Regards,

Dirk

2 REPLIES 2
Cisco Employee

Re: What are these frames for? 0x6002

These are DECNET MOP packets

If you do a "no mop enable" on the interface do these packets stop?

Highlighted
Beginner

Re: What are these frames for? 0x6002

Hello David,

It does indeed! Thank you very much!

Now to my next question :-)

Why does a pretty recent IOS like c3640-jk9o3s-mz.123-14.T7.bin still have the advertisement of these frames as a default?

Considering things like security and running extra processes etc; shouldn't stuff like this be removed from the default behaviour of the IOS?

Regards, Dirk

CreatePlease to create content
Content for Community-Ad