User`s guide

Defining Filters and Firewalls
Display unwanted dial-out packets
6-30 Preliminary January 30, 1998 Pipeline User’s Guide
The type OLD-STYLE-PADDED means that the packet has a 14-byte MAC
(Ethernet) header + datagram (ARP request message). The packet contents
provide the following information:
Example 2
In this example, the phone number dialed on receipt of this packet is 92233002.
The type OLD-STYLE-PADDED means that the packet has a 14-byte MAC
(Ethernet) header + datagram. This is a broadcast IP RWHO message.
Date: 01/01/1990. Time: 00:00:53
Cause an attempt to place call to 92233002
WD_DIALOUT_DISP: chunk 260126 type OLD-STYLE-PADDED.
: 42 octets @ 2C6950
[0000]: ff ff ff ff ff ff 00 c0 7b 61 44 fe 08 06 00 01
[0010]: 08 00 06 04 00 01 00 c0 7b 61 44 fe cc b2 d7 7b
[0020]: 00 00 00 00 00 00 cc b2 d7 13
[0000]: ff ff ff ff ff ff 00 80 c7 5b e9 5b 08 06 00 01
[0010]: 08 00 06 04 00 01 00 80 c7 5b e9 5b cc b2 d7 13
[0020]: 00 00 00 00 00 00 cc b2 d7 16 00 00 00 00 00 00
[0030]: 00 00 00 00 00 00 00 00 00 00 00 00
destination MAC address ff:ff:ff:ff:ff:ff
source MAC address 00:c0:7b:61:44:fe /* 123 */
arp packet type 08:06
arp_hrd 00:01 /* Ethernet1*/
arp_prot 08:00 /* IP=0x800 */
arp_hlen 06 /* hlen = 6 */
arp_plen 04 /* plen = 4 */
arp_op 00:01 /* arp ARP_REQ*/
arp_sha 00:c0:7b:61:44:fe /* 123 */
arp_spa cc:b2:d7:7b /* 123 */
arp_tha 00:00:00:00:00:00
arp_tpa cc:b2:d7:13 /* 19 */