[Winpcap-users] Capabilities in a CDP packet from an IP Phone (8961)

[Ryan McLean]

I've got a machine connected to an IP Phone and when checking my CDP
packets I noticed that the phone had "more" capabilities that what was
being listed in Wireshark.

The full stream is: 0004000800000490
which breaks down as
Type:  0004
Length:0008
Data:00000490

The only mask from Wireshark that matches is 0x10 which is "Is a host"
But there are two more masks:
0x80
0x0400

But there is no info as to what these mean.

Does anyone know?

Regards,

Ryan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.winpcap.org/pipermail/winpcap-users/attachments/20111201/acd9f644/attachment.html>