55
6 Frame Formats
This appendix provides octet locati ons for the various portions of three of the common Ethernet f rames. When creating
pattern filters these diagrams will assist in the correct definition of the patterns. The offset numbers are indicated by the
numbers above the frame representations.
Note the differences in the TCP/IP and Novell frames when bridging and when routing. When routing, the TCP/IP and
Novell frames are examined after the Level 2 Ethernet portion of the frame has been stripped from the whole data frame.
This means that the offset numbers no w start from 0 at the beginni ng of the routed frame and not the brid ged frame.
Some of the common Ethernet type codes are also shown here. The Ethernet type code s are located at offset 12 of the
bridged Ethernet frame.
Octet Locations on a Bridged TCP/IP Frame
Octet Locations on a Bridged Novell Netware Frame