Re: [Wireshark-users] FC Protocol ??

[Daniel Koepke]

Sorry for the delay, was pulled in different directions

Here is a sample of the scan taken today



All on TCPIP no IPX and a single VLAN

Any input would be appreciated

Thanks
Dan


Sent: Friday, November 30, 2007 4:35 PM
Subject: Re: [Wireshark-users] FC Protocol ??

At this site there is Cisco network equipment, 1 Netware server, network printers, and windows XP workstations. ----- Original Message ----- From: "ronnie sahlberg" <[EMAIL PROTECTED]> To: "Daniel Koepke" <[EMAIL PROTECTED]>; "Community support list for Wireshark" <wireshark-users@wireshark.org>

Fibre channel is a SAN protocol so it would be very likely that it
would consume a lot of bandwidth.
I.e. it is used to (primarily) act as a transport for SCSI


Normally you would not see FC on the same segment as you would have
ordinary traffic but rather only on dedicated networks in the data
centre, unless someone
has configured their switches incorrectly.

Fibre channel can be transported ontop of ethernet in several ways :
FCoE   fibre channel over ethernet, this is a very new draft standard
though so it might be unlikely wou have encountered it.
iFCP and FCIP which maps ficre channel over ip

There is also a proprietary version of iFCP that is called mFCP but it
wont be that protocol since wireshark doesnt implement it yet.


Try looking for any frames containing a fibre channel world-wide-name.
This wwn will/can at least tell you the vendor name for the
equipment.


On Dec 1, 2007 6:47 AM, Daniel Koepke <[EMAIL PROTECTED]> wrote:

Hi;

I was scanning a school segment and discovered a use of FC protocol being

but unable to see where the MAC address is used.

My questions are

Is the MAC address in the scan validate or is it transposed or deciphered
correctly
Can the FC protocal be run over ethernet or how should I view these scans

I have copied a section of the scan for review.

Thanks
Dan








_______________________________________________
Wireshark-users mailing list
Wireshark-users@wireshark.org
http://www.wireshark.org/mailman/listinfo/wireshark-users

used. I do not see this used in any of the other schools and appears to be using a lot of bandwidth. I tried to track down the MAC Address within the Cisco switches using ARP and MAC Address tables (show mac-address dynamic )

BH Scan 080129.cap
Description: Binary data

_______________________________________________
Wireshark-users mailing list
Wireshark-users@wireshark.org
http://www.wireshark.org/mailman/listinfo/wireshark-users