Ethernet Addresses
2007-12-25 7:21:00
> Can anybody tell me where to get a list of current Ethernet block address
> assignments (as assigned by IEEE or Xerox or whoever). I'm trying to track
> spurious addresses and knowing who made the ethernet hardware may help.
Thanks to:
Jonathan Corbet <corbet@stout.atd.ucar.EDU>
jht@suned1.Nswses.Navy.Mil (Jim H Tibbs)
To summarize, Xerox stopped giving out addresses in 1986 or so. It's now
done by IEEE. All the lists I got were fairly old and didn't have the
key address I needed, which turned out to be coming from some Synoptics
*passive* Ethernet hubs. The hubs apparently come with an assigned
Ethernet address (0:0:81:xx:xx:xx) and some Internet address (for our
three new hubs they were 192.26.40.3, 134.77.33.101 and 134.177.33.105).
They were ARPing for mommie and showed up while we were working on another
problem. Apparently, they have an address for future SNMP capability.
I was told that the person at IEEE to contact is Vince Condello, (201)562-3812,
although I wasn't able to get him this afternoon. He may be the name I needed.
Here is the Ethernet list I got (the senders mentioned that they got it from
the net earlier)::
------------------------------------------------------------
List of codes used on 802.3 and Ethernet networks.
Last update: 9-March-1990 (As of 3/27/90, RFC1060 ?should? contain this info)
This file contains collected information on the various codes used on
IEEE 802.3 and Ethernet. There are three "pages", Ethernet type
codes, vendor codes, and the uses of multicast (including broadcast)
addresses. I wish to thank the contributors, some are listed below
and there are almost certainly others that I have missed. Since this
information is from collected wisdom, there are certainly omissions.
I welcome any further additions which can be sent to me at
This document started as a copy of one posted by Urbaniak at BBN.
Additions and corrections have been freely contributed by the
following (as well as others whose names are forgotten):
Walter Urbaniak BBN Urbaniak@BBN.COM
Michael Patton MIT (Lab for Comp Sci) MAP@LCS.MIT.Edu
Robert Ullmann Prime Computer, Inc. ARIEL@en-c06.prime.com
Paul O'Neill OSU (Oregon?) pvo@oce.orst.edu
W. Tait Cyrus Univ. of New Mexico cyrus@pprg.unm.edu
Bill Sommerfeld MIT (Project Athena) wesommer@athena.mit.edu
Jeff Beadles Tektronix jeff@quark.wv.tek.com
John Robert LoVerso Xylogics, Inc. xylogics!loverso@bu-it.bu.edu
Harry Saal Network General hjs@lindy.stanford.edu
Anders Hillbo ? ahi@nada.kth.se
Stephen Northcott (?) US Navy (?) snorthc@relay.nswc.navy.mil
Ian Doak Newcastle Univ. (UK) I.D.Doak@newcastle.ac.uk
R Brett Wormley Raycom Systems csun!raycom!brettw
Mohamed el Lozy Harvard University ellozy@bess.harvard.edu
"Type" Fields
The 13th and 14th octets of an Ethernet or IEEE802.3 packet (after
the preamble) consist of the "Ethernet Type" or "IEEE802.3 Length"
field. The "Ethernet Type" values are managed by XEROX. Some
assignments are public (see + below), others private. Current
information includes: Xerox Public Ethernet Packet Type
documentation (Xerox Courier Vol. 3 Issue 4 October 1988); IEEE802.3
Std; NIC RFC1010; contributions from network managers and vendors.
Note Hex
@ 0000-05FF IEEE802.3 Length Field
+ 0101-01FF Experimental
0200 Xerox PUP (conflicts with 802.3 Length Field range) (see 0A00)
0201 Xerox PUP Address Translation (conflicts ...) (see 0A01)
+* 0600 Xerox NS IDP (XNS)
+*# 0800 Dod Internet Protocol (IP)
+ 0801 X.75 Internet
+ 0802 NBS Internet
+ 0803 ECMA Internet
+ 0804 CHAOSnet
+ 0805 X.25 Level 3
+* 0806 Address Resolution Protocol (ARP) (used by IP and CHAOS)
0807 Xerox NS (XNS) Compatibility
081C Symbolics Private
+ 0888-088A Xyplex
0900 Ungermann-Bass network debugger
0A00 Xerox IEEE802.3 PUP (was 0200, see above)
0A01 Xerox IEEE802.3 PUP Address Translation (was 0201, see above)
0BAD Banyan Systems
1000 Berkeley Trailer negotiation
1001-100F Berkeley Trailer encapsulation for IP
* 1600 VALID system protocol
4242 PCS Basic Block Protocol
% 5208 BBN Simnet Private
6000 DEC unassigned, experimental
6001 DEC Maintenance Operation Protocol (MOP) Dump/Load Assistance
6002 DEC Maintenance Operation Protocol (MOP) Remote Console
6003 DECNET Phase IV, DNA Routing
6004 DEC Local Area Transport (LAT)
6005 DEC diagnostic protocol (at interface initialization?)
6006 DEC customer protocol
6007 DEC Local Area VAX Cluster (LAVC), System Communication
Architecture (SCA)
6008 DEC unassigned (AMBER?)
6009 DEC unassigned (MUMPS?)
+ 6010-6014 3Com Corporation
7000 Ungermann-Bass download
7002 Ungermann-Bass diagnostic/loopback
+ 7020-7029 LRT
7030 Proteon
7034 Cabletron
8003 Cronus VLN
8004 Cronus Direct
8005 HP Probe protocol
+ 8006 Nestar
+ 8008 AT&T
8010 Excelan
+ 8013 Silicon Graphics diagnostic
+ 8014 Silicon Graphics network games
+ 8015 Silicon Graphics reserved
+ 8016 Silicon Graphics Xerox NS (XNS) NameServer, bounce server
+ 8019 Apollo DOMAIN
+ 802E Tymshare
+ 802F Tigan, Inc.
+ 8035 Reverse Address Resolution Protocol (RARP)
+ 8036 Aeonic Systems
8038 DEC LanBridge Management
8039 DEC unassigned (DSM/DTP?)
803A DEC unassigned (Argonaut Console?)
803B DEC unassigned (VAXELN?)
803C DEC unassigned (NMSV? DNA Naming Service?)
803D DEC Ethernet CSMA/CD Encryption Protocol
803E DEC unassigned (DNA Time Service?)
803F DEC LAN Traffic Monitor Protocol (LTM)
8040 DEC unassigned (NetBios Emulator?)
8041 DEC unassigned (MS/DOS?, Local Area System Transport?)
8042 DEC unassigned
+ 8044 Planning Research Corp.
+ 8046-8047 AT&T
+ 8049 ExperData
+ 805B Stanford V Kernel, experimental
+ 805C Stanford V Kernel, production
+ 805D Evans & Sutherland
+ 8060 Little Machines
+ 8062 Counterpoint Computers
+ 8065-8066 University of Massachusetts, at Amherst
+ 8067 Veeco Integrated Automation
+ 8068 General Dynamics
+ 8069 AT&T
+ 806A Autophon
+ 806C ComDesign
+ 806D Compugraphic Corporation
+ 806E-8077 Landmark Graphics Corporation
+ 807A Matra
+ 807B Dansk Data Elektronik A/S
+ 807C Merit Internodal (University of Michigan)
+ 807D-807F Vitalink Communications
+ 8080 Vitalink TransLAN III Management
+ 8081-8083 Counterpoint Computers
+ 809B EtherTalk (AppleTalk over Ethernet)
+ 809C-809E Datability
+ 809F Spider Systems Ltd.
+ 80A3 Nixdorf Computers
+ 80A4-80B3 Siemens Gammasonics Inc.
+ 80C0-80C3 Digital Comm. Assoc. Inc. (DCA)
+ 80C6 Pacer Software
+ 80C7 Applitek Corporation
+ 80C8-80CC Intergraph Corporation
+ 80CD-80CE Harris Corporation
+ 80CF-80D2 Taylor Instrument
+ 80D3-80D4 Rosemount Corporation
80D5 IBM SNA Services over Ethernet
+ 80DD Varian Associates
+ 80DE-80Df Integrated Solutions Transparent Remote File System (TRFS)
+ 80E0-80E3 Allen-Bradley
+ 80E4-80F0 Datability
+ 80F2 Retix
+ 80F3 AppleTalk Address Resolution Protocol (AARP)
+ 80F4-80F5 Kinetics
+ 80F7 Apollo Computer
+ 80FF-8103 Wellfleet Communications
8107 Symbolics Private
8108 Symbolics Private
8109 Symbolics Private
+ 8130 Waterloo Microsystems Inc.
+ 8131 VG Laboratory Systems
+ 8137 Novell, Inc. (old) NetWare IPX (ECONFIG E option)
+ 8137 Novell, Inc.
+ 8139-813D KTI
814C SNMP over Ethernet (see RFC1089)
+ 9000 Loopback (Configuration Test Protocol)
9001 Bridge Communications Xerox NS (XNS) Systems Management
9002 Bridge Communications TCP/IP Systems Management
9003 Bridge Communications
% FF00 BBN VITAL-LanBridge cache wakeups
* These protocols use Ethernet broadcast, where multicast would be preferable.
# BBN Butterfly Gateways also use 0800 for non-IP, with IP version field = 3.
% BBN Private Protocols, not registered
+ These protocols are mentioned by Xerox in their October 1988 issue of
COURIER (page 8-9) as the publicly assigned numbers. Only vendors are
listed by Xerox, not what protocols. For more information about type field
assignments, contact: Pam DuPuy, Xerox Systems Instuture, (408)737-4652.
@ According to the October 1988 issue of COURIER (page 8), "if it is less
than 600H, the packet is assumed to be an 802.3 packet; if it is greater
than 600H, the packet is flagged as an Ethernet packet."
Vendor Addresses
Ethernet hardware addresses are 48 bits, expressed as 12 hexadecimal
digits (0-9, plus A-F, capitalized). These 12 hex digits consist of
the first/left 6 digits (which should match the vendor of the
Ethernet interface within the station) and the last/right 6 digits
which specify the interface serial number for that interface vendor.
Ethernet addresses might be written unhyphenated (e.g. 123456789ABC),
or with one hyphen (e.g. 123456-789ABC), but should be written
hyphenated by octets (e.g. 12-34-56-78-9A-BC).
These addresses are physical station addresses, not multicast nor
broadcast, so the second hex digit (reading from the left) will be
even, not odd.
At present, it is not clear how the IEEE assigns Ethernet block
addresses. Whether in blocks of 2**24 or 2**25, and whether
multicasts are assigned with that block or separately. A portion of
the vendor block address is reportedly assigned serially, with the
other portion intentionally assigned randomly. If there is a global
algorithm for which addresses are designated to be physical (in a
chipset) versus logical (assigned in software), or globally-assigned
versus locally-assigned addresses, some of the known addresses do not
follow the scheme.
00-00-0C Cisco
00-00-0F NeXT
00-00-10 Sytek
00-00-1D Cabletron
00-00-20 DIAB (Data Intdustrier AB)
00-00-22 Visual Technology
00-00-2A TRW
00-00-5A S & Koch
00-00-5E U.S. Department of Defense
00-00-65 Network General
00-00-6B MIPS
00-00-77 MIPS
00-00-7A Ardent
00-00-89 Cayman Systems Gatorbox
00-00-93 Proteon
00-00-9F Ameristar Technology
00-00-A2 Wellfleet
00-00-A3 Network Application Technology
00-00-A6 Network General (internal assignment, not for products)
00-00-A7 NCD (X-terminals)
00-00-A9 Network Systems
00-00-AA Xerox Xerox machines
00-00-B3 CIMLinc
00-00-B7 Dove (Fastnet)
00-00-BC Allen-Bradley
00-00-C0 Western Digital
00-00-C6 HP Intelligent Networks Operation (formerly Eon Systems)
00-00-C8 Altos
00-00-C9 Emulex (Terminal Servers)
00-00-D7 Dartmouth College (NED Router)
00-00-D8 3Com? Novell? PS/2
00-00-DD Gould
00-00-DE Unigraph
00-00-E2 Acer Counterpoint
00-00-EF Alantec
00-00-FD High Level Hardvare (Orion, UK)
00-01-02 BBN BBN internal usage (not registered)
00-17-00 Kabel
00-80-2D Xylogics (including new "Encore" Annex's)
00-80-8C Frontier Software Development
00-AA-00 Intel
00-DD-00 Ungermann-Bass
00-DD-01 Ungermann-Bass
02-07-01 MICOM/Interlan UNIBUS or QBUS machines, Apollo
02-04-06 BBN BBN internal usage (not registered)
02-60-86 Satelcom MegaPac (UK)
02-60-8C 3Com IBM PC; Imagen; Valid; Cisco
02-CF-1F CMC Masscomp; Silicon Graphics; Prime EXL
08-00-02 Bridge
08-00-03 ACC (Advanced Computer Communications)
08-00-05 Symbolics Symbolics LISP machines
08-00-08 BBN
08-00-09 Hewlett-Packard
08-00-0A Nestar Systems
08-00-0B Unisys
08-00-10 AT&T
08-00-11 Tektronix, Inc.
08-00-14 Excelan BBN Butterfly, Masscomp, Silicon Graphics
08-00-17 NSC
08-00-1A Data General
08-00-1B Data General
08-00-1E Apollo
08-00-20 Sun Sun machines
08-00-22 NBI
08-00-25 CDC
08-00-26 Norsk Data (Nord)
08-00-27 PCS Computer Systems GmbHw
08-00-28 TI Explorer
08-00-2B DEC UNIBUS or QBUS machines, VAXen, LANBridges
(DEUNA, DEQNA, DELUA)
08-00-2E Metaphor
08-00-2F Prime Computer Prime 50-Series LHC300
08-00-36 Intergraph CAE stations
08-00-37 Fujitsu-Xerox
08-00-38 Bull
08-00-39 Spider Systems
08-00-41 DCA Digital Comm. Assoc
08-00-45 ? (not Xylogics)
08-00-46 Sony
08-00-47 Sequent
08-00-49 Univation
08-00-4C Encore
08-00-4E BICC
08-00-56 Stanford University
08-00-58 ? DECsystem-20
08-00-5A IBM
08-00-67 Comdesign
08-00-68 Ridge
08-00-69 Silicon Graphics
08-00-6E Excelan
08-00-75 DDE (Danish Data Elektronik A/S)
08-00-7C Vitalink TransLAN III
08-00-80 XIOS
08-00-86 Imagen/QMS
08-00-87 Xyplex, Inc. terminal servers
08-00-89 Kinetics AppleTalk-Ethernet interface
08-00-8B Pyramid
08-00-8D XyVision XyVision machines
08-00-90 Retix Inc bridges
48-44-53 HDS ?
80-00-10 AT&T [misrepresentation of 080010?]
AA-00-00 DEC obsolete
AA-00-01 DEC obsolete
AA-00-02 DEC obsolete
AA-00-03 DEC Global physical address for some DEC machines
AA-00-04 DEC Local logical address for systems running DECNET
Ethernet Multicast (including Broadcast) Addresses and uses
Ethernet Type
Address Field Usage
Multicast Addresses:
01-00-5E-00-00-00 0800 DoD Internet Multicast (RFC-1054)
through
01-00-5E-7F-FF-FF
01-00-5E-80-00-00 ? DoD Internet reserved
through
01-00-5E-FF-FF-FF
01-80-C2-00-00-00 -802- Spanning tree (for bridges)
09-00-02-04-00-01? 8080? Vitalink printer
09-00-02-04-00-02? 8080? Vitalink management
09-00-09-00-00-01 8005 HP Probe
09-00-09-00-00-01 -802- HP Probe
09-00-09-00-00-04 8005? HP DTC
09-00-1E-00-00-00 8019? Apollo DOMAIN
09-00-2B-00-00-00 6009? DEC MUMPS?
09-00-2B-00-00-01 8039? DEC DSM/DTP?
09-00-2B-00-00-02 803B? DEC VAXELN?
09-00-2B-00-00-03 8038 DEC Lanbridge Traffic Monitor (LTM)
09-00-2B-00-00-04 ? DEC MAP End System Hello?
09-00-2B-00-00-05 ? DEC MAP Intermediate System Hello?
09-00-2B-00-00-06 803D? DEC CSMA/CD Encryption?
09-00-2B-00-00-07 8040? DEC NetBios Emulator?
09-00-2B-00-00-0F 6004 DEC Local Area Transport (LAT)
09-00-2B-00-00-1x ? DEC Experimental
09-00-2B-01-00-00 8038 DEC LanBridge Copy packets (All bridges)
09-00-2B-01-00-01 8038 DEC LanBridge Hello packets (All local bridges)
1 packet per second, sent by the
designated LanBridge
09-00-2B-02-00-00 ? DEC DNA Level 2 Routing Layer routers?
09-00-2B-02-01-00 803C? DEC DNA Naming Service Advertisement?
09-00-2B-02-01-01 803C? DEC DNA Naming Service Solicitation?
09-00-2B-02-01-02 803E? DEC DNA Time Service?
09-00-2B-03-xx-xx ? DEC default filtering by bridges?
09-00-2B-04-00-00 8041? DEC Local Area System Transport (LAST)?
09-00-2B-23-00-00 803A? DEC Argonaut Console?
09-00-4E-00-00-02? 8137? Novell IPX
09-00-56-00-00-00 ? Stanford reserved
through
09-00-56-FE-FF-FF
09-00-56-FF-00-00 805C Stanford V Kernel, version 6.0
through
09-00-56-FF-FF-FF
09-00-77-00-00-01 ? Retix spanning tree bridges
09-00-7C-02-00-05 8080? Vitalink diagnostics
09-00-7C-05-00-01 8080? Vitalink gateway?
0D-1E-15-BA-DD-06 ? HP
AB-00-00-01-00-00 6001 DEC Maintenance Operation Protocol (MOP)
Dump/Load Assistance
AB-00-00-02-00-00 6002 DEC Maintenance Operation Protocol (MOP)
Remote Console
1 System ID packet every 8-10 minutes, by every:
DEC LanBridge
DEC DEUNA interface
DEC DELUA interface
DEC DEQNA interface (in a certain mode)
AB-00-00-03-00-00 6003 DECNET Phase IV end node Hello packets
1 packet every 15 seconds, sent by each DECNET host
AB-00-00-04-00-00 6003 DECNET Phase IV Router Hello packets
1 packet every 15 seconds, sent by the DECNET router
AB-00-00-05-00-00 ? Reserved DEC
through
AB-00-03-FF-FF-FF
AB-00-03-00-00-00 6004 DEC Local Area Transport (LAT) - old
AB-00-04-00-xx-xx ? Reserved DEC customer private use
AB-00-04-01-xx-yy 6007 DEC Local Area VAX Cluster groups
System Communication Architecture (SCA)
CF-00-00-00-00-00 9000 Ethernet Configuration Test protocol (Loopback)
Broadcast Address:
FF-FF-FF-FF-FF-FF 0600 XNS packets, Hello or gateway search?
6 packets every 15 seconds, per XNS station
FF-FF-FF-FF-FF-FF 0800 IP (e.g. RWHOD via UDP) as needed
FF-FF-FF-FF-FF-FF 0804 CHAOS
FF-FF-FF-FF-FF-FF 0806 ARP (for IP and CHAOS) as needed
FF-FF-FF-FF-FF-FF 0BAD Banyan
FF-FF-FF-FF-FF-FF 1600 VALID packets, Hello or gateway search?
1 packets every 30 seconds, per VALID station
FF-FF-FF-FF-FF-FF 8035 Reverse ARP
FF-FF-FF-FF-FF-FF 807C Merit Internodal (INP)
FF-FF-FF-FF-FF-FF 809B EtherTalk
Comments
Got something to say?
You must be logged in to post a comment.
