Probe: ether_type#

Each Ethernet frame contains a two-byte field that stores which protocol is encapsulated in this packet. This information is then used by applications to parse the incoming Ethernet frames. As an operator of an IX, you usually only want IP and IEEE802.1 traffic, other EtherTypes usually indicate a misconfiguration.

Inspected Packets#

This probe looks for packets with the following characteristics:

• EtherType: any

Configuration#

probes:
  ether_type:
    # enable this probe
    enable: true
    # list of expected EtherType values
    allowed_ether_types:
     - 0x0800 # IPv4
     - 0x0806 # ARP
     - 0x86dd # IPv6

See also:

• schema description

Events#

See Also#

• Ether Types
• IEEE 802 Numbers